Skip to content
OpenAdvisories
High ELSA-2022-5717 1 CVE

Important: grafana security update (Oracle Linux 8)

Published Jul 27, 2022 · Updated Jul 27, 2022

Ecosystem: Oracle Linux

Summary

[7.5.11-3]
- resolve CVE-2022-31107 grafana: OAuth account takeover

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 8 grafana 0:7.5.11-3.el8_6

Vulnerabilities 1

  • High 7.1
    CVE-2022-31107

    Grafana account takeover via OAuth vulnerability

    Grafana is an open-source platform for monitoring and observability. In versions 5.3 until 9.0.3, 8.5.9, 8.4.10, and 8.3.10, it is possible for a malicious user who has authorization to log into a Grafana instance via a configured OAuth IdP which provides a l…

    Grafana Grafana grafana github.com/grafana/grafana Web / CMS Ubuntu Alpine Go