Medium WID-SEC-2023-2771 1 CVE

Grafana: Schwachstelle ermöglicht Offenlegung von Informationen

Published Oct 29, 2023 · Updated Oct 29, 2023 · de-DE

Vendor: Grafana Product: Open Source Grafana Google Sheets plugin < 1.2.2 Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Grafana ausnutzen, um Informationen offenzulegen.

Product

Grafana ist eine Open-Source Analyse- und Visualisierungssoftware.

Vulnerabilities 1

Medium 5.5

CVE-2023-4457

Google Sheets data source plugin for Grafana information disclosure vulnerability

Grafana is an open-source platform for monitoring and observability. The Google Sheets data source plugin for Grafana, versions 0.9.0 to 1.2.2 are vulnerable to an information disclosure vulnerability. The plugin did not properly sanitize error messages, maki…

Grafana google-sheets-datasource github.com/grafana/google-sheets-datasource Go

Oct 16, 2023

Revision history

2023-10-29 #1
Initiale Fassung

References

GitHub Advisory Database vom 2023-10-29
https://github.com/advisories/GHSA-37x5-qpm8-53rq
Grafana Security Advisory vom 2023-10-29
https://grafana.com/security/security-advisories/cve-2023-4457/