Skip to content
OpenAdvisories
Critical 1 exploited CVE RHSA-2021:3771 1 CVE

Red Hat Security Advisory: grafana security update

Published Sep 18, 2024 · Updated Aug 14, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream grafana 0:7.3.6-3.el8_4
Red Hat · RHEL 8 enterprise_linux:8::appstream grafana-debuginfo 0:7.3.6-3.el8_4

Vulnerabilities 1

  • Critical 9.8
    CVE-2021-39226 Exploited Scanner template EPSS 100%

    Snapshot authentication bypass in grafana

    Grafana is an open source data visualization platform. In affected versions unauthenticated and authenticated users are able to view the snapshot with the lowest database key by accessing the literal paths: /dashboard/snapshot/:key, or /api/snapshots/:key. If…

    Grafana Grafana grafana github.com/grafana/grafana Web / CMS Ubuntu Go
    KEV Aug 25, 2022

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2011063
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3771.json
  • report
    https://access.redhat.com/security/cve/CVE-2021-39226
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-39226
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-39226
  • article
    https://github.com/grafana/grafana/security/advisories/GHSA-69j6-29vr-p3j9
  • article
    https://grafana.com/blog/2021/10/05/grafana-7.5.11-and-8.1.6-released-with-critical-security-fix/
  • article
    https://www.cisa.gov/known-exploited-vulnerabilities-catalog