https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 01:48:41 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-02572 bdu:2024-02572 https://cve.radiocsirt.org/vuln/bdu:2024-02572 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0847 certfr-2023-avi-0847 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0847 https://cve.radiocsirt.org/vuln/euvd-2026-266988 EUVD-2026-266988 https://cve.radiocsirt.org/vuln/euvd-2026-266988 https://cve.radiocsirt.org/vuln/fkie_cve-2023-4822 <p>Grafana is an open-source platform for monitoring and observability. The vulnerability impacts Grafana instances with several organizations, and allows a user with Organization Admin permissions in one organization to change the permissions associated with Organization Viewer, Organization Editor and Organization Admin roles in all organizations.</p> <p>It also allows an Organization Admin to assign or revoke any permissions that they have to any user globally.</p> <p>This means that any Organization Admin can elevate their own permissions in any organization that they are already a member of, or elevate or restrict the permissions of any other user.</p> <p>The vulnerability does not allow a user to become a member of an organization that they are not already a member of, or to add any other users to an organization that the current user is not a member of.</p> <p>Grafana is an open-source platform for monitoring and observability. The vulnerability impacts Grafana instances with several organizations, and allows a user with Organization Admin permissions in one organization to change the permissions associated with Organization Viewer, Organization Editor and Organization Admin roles in all organizations.</p> <p>It also allows an Organization Admin to assign or revoke any permissions that they have to any user globally.</p> <p>This means that any Organization Admin can elevate their own permissions in any organization that they are already a member of, or elevate or restrict the permissions of any other user.</p> <p>The vulnerability does not allow a user to become a member of an organization that they are not already a member of, or to add any other users to an organization that the current user is not a member of.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-4822 https://cve.radiocsirt.org/vuln/ghsa-fw9c-75hh-89p6 <p><strong>Affected:</strong> Go: github.com/grafana/grafana</p> <p>Grafana is an open-source platform for monitoring and observability. The vulnerability impacts instances with several organizations, and allows a user with Organization Admin permissions in one organization to change the permissions associated with Organization Viewer, Organization Editor and Organization Admin roles in all organizations.</p> <p>It also allows an Organization Admin to assign or revoke any permissions that they have to any user globally.</p> <p>This means that any Organization Admin can elevate their own permissions in any organization that they are already a member of, or elevate or restrict the permissions of any other user.</p> <p>The vulnerability does not allow a user to become a member of an organization that they are not already a member of, or to add any other users to an organization that the current user is not a member of.</p> <p><strong>Affected:</strong> Go: github.com/grafana/grafana</p> <p>Grafana is an open-source platform for monitoring and observability. The vulnerability impacts instances with several organizations, and allows a user with Organization Admin permissions in one organization to change the permissions associated with Organization Viewer, Organization Editor and Organization Admin roles in all organizations.</p> <p>It also allows an Organization Admin to assign or revoke any permissions that they have to any user globally.</p> <p>This means that any Organization Admin can elevate their own permissions in any organization that they are already a member of, or elevate or restrict the permissions of any other user.</p> <p>The vulnerability does not allow a user to become a member of an organization that they are not already a member of, or to add any other users to an organization that the current user is not a member of.</p> https://cve.radiocsirt.org/vuln/ghsa-fw9c-75hh-89p6 https://cve.radiocsirt.org/vuln/gsd-2023-4822 gsd-2023-4822 https://cve.radiocsirt.org/vuln/gsd-2023-4822 https://cve.radiocsirt.org/vuln/rhsa-2024:3925 <p>grafana: account takeover possible when using Azure AD OAuth grafana: incorrect assessment of permissions across organizations go-git: Maliciously crafted Git server replies can cause DoS on go-git clients go-git: Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients</p> <p>grafana: account takeover possible when using Azure AD OAuth grafana: incorrect assessment of permissions across organizations go-git: Maliciously crafted Git server replies can cause DoS on go-git clients go-git: Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients</p> https://cve.radiocsirt.org/vuln/rhsa-2024:3925 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-4822 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: grafana</p> <p>Grafana is an open-source platform for monitoring and observability. The vulnerability impacts Grafana instances with several organizations, and allows a user with Organization Admin permissions in one organization to change the permissions associated with Organization Viewer, Organization Editor and Organization Admin roles in all organizations. It also allows an Organization Admin to assign or revoke any permissions that they have to any user globally. This means that any Organization Admin can elevate their own permissions in any organization that they are already a member of, or elevate or restrict the permissions of any other user. The vulnerability does not allow a user to become a member of an organization that they are not already a member of, or to add any other users to an organization that the current user is not a member of.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: grafana</p> <p>Grafana is an open-source platform for monitoring and observability. The vulnerability impacts Grafana instances with several organizations, and allows a user with Organization Admin permissions in one organization to change the permissions associated with Organization Viewer, Organization Editor and Organization Admin roles in all organizations. It also allows an Organization Admin to assign or revoke any permissions that they have to any user globally. This means that any Organization Admin can elevate their own permissions in any organization that they are already a member of, or elevate or restrict the permissions of any other user. The vulnerability does not allow a user to become a member of an organization that they are not already a member of, or to add any other users to an organization that the current user is not a member of.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-4822 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2646 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Grafana ausnutzen, um seine Privilegien zu erhöhen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Grafana ausnutzen, um seine Privilegien zu erhöhen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2646