Summary
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Grafana ausnutzen, um Informationen offenzulegen.
Product
Grafana ist eine Analyse- und Visualisierungssoftware.
Vulnerabilities 1
-
Low 1.3
Grafana Alerting Editors can edit destination of webhooks they did not create
In Grafana's alerting system, users with edit permissions for a contact point, specifically the permissions “alert.notifications:write” or “alert.notifications.receivers:test” that are granted as part of the fixed role "Contact Point Writer", which is part of…
Revision history
-
#3
Neue Updates von SUSE aufgenommen
-
#2
Neue Updates von openSUSE aufgenommen
-
#1
Initiale Fassung
References
-
Grafana Security Advisory vom 2026-04-15
https://grafana.com/security/security-advisories/cve-2025-12141/
-
GitHub Security Advisory GHSA-pcxf-fmpx-32ph vom 2026-04-15
https://github.com/advisories/GHSA-pcxf-fmpx-32ph
-
openSUSE Security Update OPENSUSE-SU-2026:21351-1 vom 2026-07-15
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F5ZK7JNOQXG4RH3JXMVKUL3W7VIVSZEP/
-
SUSE Security Update SUSE-SU-2026:3718-1 vom 2026-08-25
https://lists.suse.com/pipermail/sle-security-updates/2026-August/028485.html