Skip to content
OpenAdvisories
High 1 exploited CVE ELSA-2021-3771 1 CVE

Important: grafana security update (Oracle Linux 8)

Published Oct 12, 2021 · Updated Oct 12, 2021

Ecosystem: Oracle Linux

Summary

[7.3.6-3]
- resolve CVE-2021-39226
- resolve CVE-2021-27358

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 8 grafana 0:7.3.6-3.el8_4

Vulnerabilities 1

  • Critical 9.8
    CVE-2021-39226 Exploited Scanner template EPSS 100%

    Snapshot authentication bypass in grafana

    Grafana is an open source data visualization platform. In affected versions unauthenticated and authenticated users are able to view the snapshot with the lowest database key by accessing the literal paths: /dashboard/snapshot/:key, or /api/snapshots/:key. If…

    Grafana Grafana grafana github.com/grafana/grafana Web / CMS Ubuntu Go
    KEV Aug 25, 2022