Most recent entries from all

bdu:2021-02136

BIT-grafana-2020-13379

Affected: Bitnami: grafana

The avatar feature in Grafana 3.0.1 through 7.0.1 has an SSRF Incorrect Access Control issue. This vulnerability allows any unauthenticated user/client to make Grafana send HTTP requests to any URL and return its result to the user/client. This can be used to gain information about the network that Grafana is running on. Furthermore, passing invalid URL objects could be used for DOS'ing Grafana via SegFault.

cnvd-2020-38223

EUVD-2026-41712

fkie_cve-2020-13379

GHSA-wc9w-wvq2-ffm9 — Server Side Request Forgery in Grafana

Affected: Go: github.com/grafana/grafana

The avatar feature in Grafana (github.com/grafana/grafana/pkg/api/avatar) 3.0.1 through 7.0.1 has an SSRF Incorrect Access Control issue that allows remote code execution. This vulnerability allows any unauthenticated user/client to make Grafana send HTTP requests to any URL and return its result to the user/client. This can be used to gain information about the network that Grafana is running on.

gsd-2020-13379

openSUSE-SU-2020:0892-1 — Security update for grafana, grafana-piechart-panel, grafana-status-panel

Security update for grafana, grafana-piechart-panel, grafana-status-panel

RHSA-2020:2676 — Red Hat Security Advisory: grafana security update

grafana: SSRF incorrect access control vulnerability allows unauthenticated users to make grafana send HTTP requests to any URL

SUSE-SU-2020:1970-1 — Security update for SUSE Manager Client Tools

Security update for SUSE Manager Client Tools