Medium WID-SEC-2024-2182 1 CVE

Grafana: Schwachstelle ermöglicht Offenlegung von Informationen

Published Sep 18, 2024 · Updated Sep 18, 2024 · de-DE

Vendor: Grafana Product: Grafana Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Grafana ausnutzen, um Informationen offenzulegen.

Product

Grafana ist eine Open-Source Analyse- und Visualisierungssoftware.

Vulnerabilities 1

Critical 9.1

CVE-2024-8986

Information Leakage in grafana-plugin-sdk-go

The grafana plugin SDK bundles build metadata into the binaries it compiles; this metadata includes the repository URI for the plugin being built, as retrieved by running `git remote get-url origin`. If credentials are included in the repository URI (for inst…

grafana-plugin-sdk-go Grafana Plugin SDK github.com/grafana/grafana-plugin-sdk-go Web / CMS Go

Sep 19, 2024

Revision history

2024-09-18 #1
Initiale Fassung

References

Grafana Security Advisory vom 2024-09-18
https://grafana.com/security/security-advisories/cve-2024-8986/