Skip to content
OpenAdvisories
High ELSA-2022-5716 1 CVE

Important: grafana security update (Oracle Linux 9)

Published Jul 26, 2022 · Updated Jul 26, 2022

Ecosystem: Oracle Linux

Summary

[7.5.11-5]
- resolve CVE-2022-31107 grafana: OAuth account takeover

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 9 grafana 0:7.5.11-5.el9_0

Vulnerabilities 1

  • High 7.1
    CVE-2022-31107

    Grafana account takeover via OAuth vulnerability

    Grafana is an open-source platform for monitoring and observability. In versions 5.3 until 9.0.3, 8.5.9, 8.4.10, and 8.3.10, it is possible for a malicious user who has authorization to log into a Grafana instance via a configured OAuth IdP which provides a l…

    Grafana Grafana grafana github.com/grafana/grafana Web / CMS Ubuntu Alpine Go