https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 17:38:27 +0000 https://cve.radiocsirt.org/vuln/cve-2023-4822 <p><strong>Affected:</strong> Grafana Enterprise, grafana_enterprise</p> <p>Grafana is an open-source platform for monitoring and observability. The vulnerability impacts Grafana instances with several organizations, and allows a user with Organization Admin permissions in one organization to change the permissions associated with Organization Viewer, Organization Editor and Organization Admin roles in all organizations.</p> <p>It also allows an Organization Admin to assign or revoke any permissions that they have to any user globally.</p> <p>This means that any Organization Admin can elevate their own permissions in any organization that they are already a member of, or elevate or restrict the permissions of any other user.</p> <p>The vulnerability does not allow a user to become a member of an organization that they are not already a member of, or to add any other users to an organization that the current user is not a member of.</p> <p><strong>Affected:</strong> Grafana Enterprise, grafana_enterprise</p> <p>Grafana is an open-source platform for monitoring and observability. The vulnerability impacts Grafana instances with several organizations, and allows a user with Organization Admin permissions in one organization to change the permissions associated with Organization Viewer, Organization Editor and Organization Admin roles in all organizations.</p> <p>It also allows an Organization Admin to assign or revoke any permissions that they have to any user globally.</p> <p>This means that any Organization Admin can elevate their own permissions in any organization that they are already a member of, or elevate or restrict the permissions of any other user.</p> <p>The vulnerability does not allow a user to become a member of an organization that they are not already a member of, or to add any other users to an organization that the current user is not a member of.</p> https://cve.radiocsirt.org/vuln/cve-2023-4822