CVE-2021-43813 — Directory Traversal in Grafana

Description

Grafana is an open-source platform for monitoring and observability. Grafana prior to versions 8.3.2 and 7.5.12 contains a directory traversal vulnerability for fully lowercase or fully uppercase .md files. The vulnerability is limited in scope, and only allows access to files with the extension .md to authenticated users only. Grafana Cloud instances have not been affected by the vulnerability. Users should upgrade to patched versions 8.3.2 or 7.5.12. For users who cannot upgrade, running a reverse proxy in front of Grafana that normalizes the PATH of the request will mitigate the vulnerability. The proxy will have to also be able to handle url encoded paths. Alternatively, for fully lowercase or fully uppercase .md files, users can block /api/plugins/.*/markdown/.* without losing any functionality beyond inlined plugin help text.

Affected products

Vendor	Product	Affected	Fixed
grafana	grafana	>= 5.0.0, < 7.5.12, >= 8.0.0, < 8.3.2	—

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Ubuntu

Security tracker ↗

Release	Package	Fixed in	Advisory
Ubuntu 16.04 LTS	grafana	No fix yet	—

Red Hat

Security tracker ↗

Release	Package	Fixed in	Advisory
RHEL 8	grafana	7.5.11-2.el8	RHSA-2022:1781

AlmaLinux

Errata ↗

Release	Package	Fixed in	Advisory
AlmaLinux 8	grafana	7.5.11-2.el8	ALSA-2022:1781

Rocky Linux

Errata ↗

Release	Package	Fixed in	Advisory
Rocky Linux 8	grafana	7.5.11-2.el8	RLSA-2022:1781

SUSE

Security tracker ↗

Release	Package	Fixed in	Advisory
SLES 15 SP4	grafana	8.5.13-150200.3.29.5	SUSE-SU-2022:4428-1
SLES 12 SP5	golang-github-prometheus-node_exporter	1.3.0-1.15.3	SUSE-SU-2022:2134-1
SLES 12 SP4	golang-github-prometheus-node_exporter	1.3.0-1.15.3	SUSE-SU-2022:2134-1
SLES 12 SP3	golang-github-prometheus-node_exporter	1.3.0-1.15.3	SUSE-SU-2022:2134-1

Show 16 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
SLES for SAP 12 SP5	golang-github-prometheus-node_exporter	1.3.0-1.15.3	SUSE-SU-2022:2134-1
SLES for SAP 12 SP4	golang-github-prometheus-node_exporter	1.3.0-1.15.3	SUSE-SU-2022:2134-1
SLES for SAP 12 SP3	golang-github-prometheus-node_exporter	1.3.0-1.15.3	SUSE-SU-2022:2134-1
SUSE OpenStack Cloud Crowbar 9	golang-github-prometheus-node_exporter	1.3.0-1.15.3	SUSE-SU-2022:2134-1
SUSE OpenStack Cloud Crowbar 9	grafana	6.7.4-3.26.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud Crowbar 9	openstack-barbican	7.0.1~dev24-3.14.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud Crowbar 9	openstack-cinder	13.0.10~dev24-3.34.2	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud Crowbar 9	openstack-heat-gbp	14.0.1~dev4-3.9.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud Crowbar 9	openstack-horizon-plugin-gbp-ui	14.0.1~dev3-3.9.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud Crowbar 9	openstack-ironic	11.1.5~dev18-3.28.2	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud Crowbar 9	openstack-keystone	14.2.1~dev9-3.28.2	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud Crowbar 9	openstack-neutron	13.0.8~dev206-3.40.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud Crowbar 9	openstack-neutron-gbp	14.0.1~dev33-3.31.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud Crowbar 9	python-Pillow	5.2.0-3.17.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud Crowbar 9	python-XStatic-jquery-ui	1.13.0.1-4.3.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud Crowbar 9	python-lxml	4.2.4-3.3.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud Crowbar 9	release-notes-suse-openstack-cloud	9.20220413-3.30.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud Crowbar 9	rubygem-sinatra	1.4.6-4.3.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud Crowbar 8	golang-github-prometheus-node_exporter	1.3.0-1.15.3	SUSE-SU-2022:2134-1
SUSE OpenStack Cloud 9	ardana-barbican	9.0+git.1644879908.8a641c1-3.13.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	golang-github-prometheus-node_exporter	1.3.0-1.15.3	SUSE-SU-2022:2134-1
SUSE OpenStack Cloud 9	grafana	6.7.4-3.26.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	openstack-barbican	7.0.1~dev24-3.14.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	openstack-cinder	13.0.10~dev24-3.34.2	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	openstack-heat-gbp	14.0.1~dev4-3.9.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	openstack-horizon-plugin-gbp-ui	14.0.1~dev3-3.9.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	openstack-ironic	11.1.5~dev18-3.28.2	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	openstack-keystone	14.2.1~dev9-3.28.2	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	openstack-neutron	13.0.8~dev206-3.40.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	openstack-neutron-gbp	14.0.1~dev33-3.31.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	python-Pillow	5.2.0-3.17.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	python-XStatic-jquery-ui	1.13.0.1-4.3.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	python-lxml	4.2.4-3.3.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	release-notes-suse-openstack-cloud	9.20220413-3.30.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	venv-openstack-barbican	7.0.1~dev24-3.35.2	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	venv-openstack-cinder	13.0.10~dev24-3.38.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	venv-openstack-designate	7.0.2~dev2-3.35.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	venv-openstack-glance	17.0.1~dev30-3.33.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	venv-openstack-heat	11.0.4~dev4-3.35.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	venv-openstack-horizon	14.1.1~dev11-4.39.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	venv-openstack-ironic	11.1.5~dev18-4.33.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	venv-openstack-keystone	14.2.1~dev9-3.36.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	venv-openstack-magnum	7.2.1~dev1-4.35.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	venv-openstack-manila	7.4.2~dev60-3.41.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	venv-openstack-monasca	2.7.1~dev10-3.37.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	venv-openstack-monasca-ceilometer	1.8.2~dev3-3.35.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	venv-openstack-neutron	13.0.8~dev206-6.39.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	venv-openstack-nova	18.3.1~dev91-3.39.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	venv-openstack-octavia	3.2.3~dev7-4.35.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	venv-openstack-sahara	9.0.2~dev15-3.35.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 9	venv-openstack-swift	2.19.2~dev48-2.30.1	SUSE-SU-2022:1729-1
SUSE OpenStack Cloud 8	golang-github-prometheus-node_exporter	1.3.0-1.15.3	SUSE-SU-2022:2134-1
SUSE Manager Server Module 4.2	prometheus-postgres_exporter	0.10.0-150000.1.3.1	SUSE-SU-2022:1396-1
SUSE Manager Proxy Module 4.3	golang-github-boynux-squid_exporter	1.6-150000.1.9.1	SUSE-SU-2022:4437-1
SUSE Manager Proxy Module 4.3	prometheus-blackbox_exporter	0.19.0-150000.1.14.3	SUSE-SU-2022:4437-1
SUSE Manager Proxy Module 4.2	golang-github-boynux-squid_exporter	1.6-150000.1.9.1	SUSE-SU-2022:4437-1
SUSE Manager Proxy Module 4.2	prometheus-blackbox_exporter	0.19.0-150000.1.14.3	SUSE-SU-2022:4437-1
SUSE Manager Client Tools for SLE Micro 5	dracut-saltboot	0.1.1665997480.587fa10-150000.1.41.1	SUSE-SU-2022:4437-1
SUSE Manager Client Tools for SLE Micro 5	prometheus-blackbox_exporter	0.19.0-150000.1.14.3	SUSE-SU-2022:4437-1
SUSE Manager Client Tools for SLE Micro 5	uyuni-proxy-systemd-services	4.3.7-150000.1.9.3	SUSE-SU-2022:4437-1
SUSE Manager Client Tools Beta for SLE Micro 5	dracut-saltboot	0.1.1681904360.84ef141-159000.3.30.1	SUSE-SU-2024:0196-1
SUSE Manager Client Tools Beta for SLE Micro 5	golang-github-QubitProducts-exporter_exporter	0.4.0-159000.4.6.1	SUSE-SU-2024:0196-1
SUSE Manager Client Tools Beta for SLE Micro 5	prometheus-blackbox_exporter	0.24.0-159000.3.6.1	SUSE-SU-2024:0196-1
SUSE Manager Client Tools Beta for SLE Micro 5	uyuni-proxy-systemd-services	5.0.1-159000.3.9.1	SUSE-SU-2024:0196-1
SUSE Manager Client Tools 15	ansible	2.9.27-159000.3.9.1	SUSE-SU-2024:0196-1
SUSE Manager Client Tools 15	dracut-saltboot	0.1.1665997480.587fa10-150000.1.41.1	SUSE-SU-2024:0196-1, SUSE-SU-2022:4437-1
SUSE Manager Client Tools 15	golang-github-QubitProducts-exporter_exporter	0.4.0-159000.4.6.1	SUSE-SU-2024:0196-1
SUSE Manager Client Tools 15	golang-github-boynux-squid_exporter	1.6-150000.1.9.1	SUSE-SU-2024:0196-1, SUSE-SU-2022:4437-1
SUSE Manager Client Tools 15	golang-github-lusitaniae-apache_exporter	1.0.0-159000.4.12.1	SUSE-SU-2024:0196-1
SUSE Manager Client Tools 15	golang-github-prometheus-prometheus	2.45.0-159000.6.33.1	SUSE-SU-2024:0196-1
SUSE Manager Client Tools 15	grafana	7.5.12-1.27.1	SUSE-SU-2024:0196-1, SUSE-SU-2022:4437-1, SUSE-SU-2022:1396-1
SUSE Manager Client Tools 15	mgr-cfg	4.2.8-150000.1.24.1	SUSE-SU-2022:1396-1
SUSE Manager Client Tools 15	mgr-osad	4.2.8-150000.1.36.1	SUSE-SU-2022:1396-1
SUSE Manager Client Tools 15	mgr-push	4.2.5-150000.1.18.2	SUSE-SU-2024:0196-1, SUSE-SU-2022:1396-1
SUSE Manager Client Tools 15	mgr-virtualization	4.2.4-150000.1.26.1	SUSE-SU-2022:1396-1
SUSE Manager Client Tools 15	prometheus-blackbox_exporter	0.19.0-150000.1.14.3	SUSE-SU-2024:0196-1, SUSE-SU-2022:4437-1
SUSE Manager Client Tools 15	prometheus-postgres_exporter	0.10.0-150000.1.3.1	SUSE-SU-2024:0196-1, SUSE-SU-2022:1396-1
SUSE Manager Client Tools 15	python-hwdata	2.3.5-159000.5.13.1	SUSE-SU-2024:0196-1
SUSE Manager Client Tools 15	python-pyvmomi	6.7.3-159000.3.6.1	SUSE-SU-2024:0196-1
SUSE Manager Client Tools 15	rhnlib	4.2.6-150000.3.34.1	SUSE-SU-2024:0196-1, SUSE-SU-2022:1396-1
SUSE Manager Client Tools 15	spacecmd	4.2.16-150000.3.77.1	SUSE-SU-2024:0196-1, SUSE-SU-2022:4437-1, SUSE-SU-2022:1396-1
SUSE Manager Client Tools 15	spacewalk-client-tools	4.2.18-150000.3.59.1	SUSE-SU-2024:0196-1, SUSE-SU-2022:4437-1, SUSE-SU-2022:1396-1
SUSE Manager Client Tools 15	spacewalk-koan	4.2.6-150000.3.27.1	SUSE-SU-2022:1396-1
SUSE Manager Client Tools 15	spacewalk-oscap	4.2.4-150000.3.18.1	SUSE-SU-2022:1396-1
SUSE Manager Client Tools 15	supportutils-plugin-salt	1.2.2-159000.5.9.1	SUSE-SU-2024:0196-1
SUSE Manager Client Tools 15	supportutils-plugin-susemanager-client	5.0.1-159000.6.15.1	SUSE-SU-2024:0196-1
SUSE Manager Client Tools 15	suseRegisterInfo	4.2.6-150000.3.21.1	SUSE-SU-2022:1396-1
SUSE Manager Client Tools 15	uyuni-common-libs	5.0.1-159000.3.33.1	SUSE-SU-2024:0196-1
SUSE Manager Client Tools 15	uyuni-proxy-systemd-services	4.3.7-150000.1.9.3	SUSE-SU-2024:0196-1, SUSE-SU-2022:4437-1
SUSE Manager Client Tools 12	golang-github-QubitProducts-exporter_exporter	0.4.0-1.6.1	SUSE-SU-2024:0191-1, SUSE-SU-2022:2134-1
SUSE Manager Client Tools 12	golang-github-boynux-squid_exporter	1.6-1.9.1	SUSE-SU-2024:0191-1, SUSE-SU-2022:4439-1
SUSE Manager Client Tools 12	golang-github-lusitaniae-apache_exporter	1.0.0-4.12.4	SUSE-SU-2024:0191-1
SUSE Manager Client Tools 12	golang-github-prometheus-alertmanager	0.23.0-1.12.3	SUSE-SU-2024:0191-1, SUSE-SU-2022:2134-1
SUSE Manager Client Tools 12	golang-github-prometheus-node_exporter	1.3.0-1.15.3	SUSE-SU-2024:0191-1, SUSE-SU-2022:2134-1
SUSE Manager Client Tools 12	golang-github-prometheus-prometheus	2.45.0-4.33.3	SUSE-SU-2024:0191-1
SUSE Manager Client Tools 12	golang-github-prometheus-promu	0.14.0-4.12.2	SUSE-SU-2024:0191-1
SUSE Manager Client Tools 12	grafana	7.5.12-1.27.1	SUSE-SU-2024:0191-1, SUSE-SU-2022:4439-1, SUSE-SU-2022:2134-1
SUSE Manager Client Tools 12	kiwi-desc-saltboot	0.1.1687520761.cefb248-4.15.2	SUSE-SU-2024:0191-1
SUSE Manager Client Tools 12	mgr-cfg	4.3.6-1.27.4	SUSE-SU-2022:2134-1
SUSE Manager Client Tools 12	mgr-custom-info	4.3.3-1.18.1	SUSE-SU-2022:2134-1
SUSE Manager Client Tools 12	mgr-daemon	4.3.4-1.32.3	SUSE-SU-2022:2134-1
SUSE Manager Client Tools 12	mgr-osad	4.3.6-1.39.4	SUSE-SU-2022:2134-1
SUSE Manager Client Tools 12	mgr-push	4.3.4-1.21.4	SUSE-SU-2024:0191-1, SUSE-SU-2022:2134-1
SUSE Manager Client Tools 12	mgr-virtualization	4.3.5-1.29.3	SUSE-SU-2022:2134-1
SUSE Manager Client Tools 12	prometheus-blackbox_exporter	0.19.0-1.8.2	SUSE-SU-2024:0191-1, SUSE-SU-2022:4439-1, SUSE-SU-2022:2134-1
SUSE Manager Client Tools 12	prometheus-postgres_exporter	0.10.0-1.8.2	SUSE-SU-2024:0191-1, SUSE-SU-2022:2134-1
SUSE Manager Client Tools 12	python-hwdata	2.3.5-12.9.1	SUSE-SU-2024:0191-1, SUSE-SU-2022:2134-1
SUSE Manager Client Tools 12	rhnlib	4.3.4-21.43.3	SUSE-SU-2024:0191-1, SUSE-SU-2022:2134-1
SUSE Manager Client Tools 12	spacecmd	4.3.11-38.103.3	SUSE-SU-2024:0191-1, SUSE-SU-2022:4439-1, SUSE-SU-2022:2134-1
SUSE Manager Client Tools 12	spacewalk-client-tools	4.3.9-52.71.3	SUSE-SU-2022:4439-1, SUSE-SU-2022:2134-1
SUSE Manager Client Tools 12	spacewalk-koan	4.3.5-24.33.3	SUSE-SU-2022:2134-1
SUSE Manager Client Tools 12	spacewalk-oscap	4.3.5-19.27.1	SUSE-SU-2022:2134-1
SUSE Manager Client Tools 12	spacewalk-remote-utils	4.3.3-24.24.3	SUSE-SU-2022:2134-1
SUSE Manager Client Tools 12	supportutils-plugin-salt	1.2.0-6.16.1	SUSE-SU-2024:0191-1, SUSE-SU-2022:2134-1
SUSE Manager Client Tools 12	supportutils-plugin-susemanager-client	4.3.2-6.24.1	SUSE-SU-2024:0191-1, SUSE-SU-2022:2134-1
SUSE Manager Client Tools 12	suseRegisterInfo	4.3.3-25.27.3	SUSE-SU-2022:2134-1
SUSE Manager Client Tools 12	system-user-grafana +1	1.0.0-3.7.2	SUSE-SU-2024:0191-1
SUSE Manager Client Tools 12	uyuni-common-libs	4.3.4-1.21.3	SUSE-SU-2024:0191-1, SUSE-SU-2022:2134-1
SUSE HPE Helion OpenStack 8	golang-github-prometheus-node_exporter	1.3.0-1.15.3	SUSE-SU-2022:2134-1
SUSE Enterprise Storage 6	grafana	7.5.12-150100.3.9.1	SUSE-SU-2022:3425-1

openSUSE

Security tracker ↗

Release	Package	Fixed in	Advisory
openSUSE Tumbleweed	grafana	7.5.12-1.1	openSUSE-SU-2024:11694-1
openSUSE Leap 15.4	dracut-saltboot	0.1.1665997480.587fa10-150000.1.41.1	SUSE-SU-2022:4437-1
openSUSE Leap 15.4	golang-github-boynux-squid_exporter	1.6-150000.1.9.1	SUSE-SU-2022:4437-1
openSUSE Leap 15.4	golang-github-prometheus-promu	0.13.0-150000.3.9.1	SUSE-SU-2022:4437-1
openSUSE Leap 15.4	grafana	8.3.5-150200.3.21.1	SUSE-SU-2022:4428-1, SUSE-FU-2022:1419-1
openSUSE Leap 15.4	prometheus-blackbox_exporter	0.19.0-150000.1.14.3	SUSE-SU-2022:4437-1
openSUSE Leap 15.4	spacecmd	4.3.16-150000.3.89.1	SUSE-SU-2022:4437-1
openSUSE Leap 15.4	wire	0.5.0-150000.1.9.3	SUSE-SU-2022:4437-1
openSUSE Leap 15.3	dracut-saltboot	0.1.1665997480.587fa10-150000.1.41.1	SUSE-SU-2022:4437-1
openSUSE Leap 15.3	golang-github-boynux-squid_exporter	1.6-150000.1.9.1	SUSE-SU-2022:4437-1
openSUSE Leap 15.3	golang-github-prometheus-promu	0.13.0-150000.3.9.1	SUSE-SU-2022:4437-1
openSUSE Leap 15.3	grafana	7.5.12-3.18.1	openSUSE-SU-2022:0140-1, SUSE-SU-2022:4428-1, SUSE-FU-2022:1419-1
openSUSE Leap 15.3	prometheus-postgres_exporter	0.10.0-150000.1.3.1	SUSE-SU-2022:1396-1
openSUSE Leap 15.3	rhnlib	4.2.6-150000.3.34.1	SUSE-SU-2022:1396-1
openSUSE Leap 15.3	spacecmd	4.2.16-150000.3.77.1	SUSE-SU-2022:4437-1, SUSE-SU-2022:1396-1

Alpine

Security tracker ↗

Release	Package	Fixed in	Advisory
Alpine v3.24	grafana	8.3.2-r0	—
Alpine v3.23	grafana	8.3.2-r0	—
Alpine v3.22	grafana	8.3.2-r0	—
Alpine v3.21	grafana	8.3.2-r0	—
Alpine v3.20	grafana	8.3.2-r0	—

Show 4 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
Alpine v3.19	grafana	8.3.2-r0	—
Alpine v3.18	grafana	8.3.2-r0	—
Alpine v3.17	grafana	8.3.2-r0	—
Alpine v3.16	grafana	8.3.2-r0	—

Oracle Linux

Release	Package	Fixed in	Advisory
Oracle Linux 8	grafana	7.5.11-2.el8	ELSA-2022-1781

Advisories 19

ALSA-2022:1781 Low: grafana security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 29, 2026
RHSA-2022:1781 Red Hat Security Advisory: grafana security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Jul 3, 2026
RLSA-2022:1781 Low: grafana security, bug fix, and enhancement update Rocky Linux Security Advisories · Feb 5, 2026
SUSE-FU-2022:1419-1 Feature update for grafana SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2022:4439-1 Security update for SUSE Manager Client Tools SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2024:0191-1 Security Beta update for SUSE Manager Client Tools SUSE / openSUSE Security Updates · Feb 4, 2026
openSUSE-SU-2022:0140-1 Security update for grafana SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2022:1729-1 Security update for ardana-barbican, grafana, openstack-barbican, openstack-cinder, openstack-heat-gbp, openstack-horizon-plugin-gbp-ui, openstack-ironic, openstack-keystone, openstack-neutron-gbp, python-lxml, release-notes-suse-openstack-cloud SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2022:3425-1 Security update for grafana SUSE / openSUSE Security Updates · Feb 4, 2026
openSUSE-SU-2024:11694-1 grafana-7.5.12-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2022:1396-1 Security update for SUSE Manager Client Tools SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2022:4437-1 Security update for SUSE Manager Client Tools SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2022:4428-1 Security update for grafana SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2022:0139-1 Security update for grafana SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2022:0138-1 Security update for grafana SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2022:2134-1 Security update for SUSE Manager Client Tools SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2024:0196-1 Security Beta update for SUSE Manager Client Tools and Salt SUSE / openSUSE Security Updates · Feb 4, 2026
WID-SEC-2022-0405 Grafana: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen BSI CERT-Bund (WID) · Feb 15, 2024
ELSA-2022-1781 Low: grafana security, bug fix, and enhancement update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · May 17, 2022

CNA	v3.1	4.3
EUVD	v3.1	4.3

Directory Traversal in Grafana

Description

Affected products

Fixed in Linux distributions

Ubuntu

Red Hat

AlmaLinux

Rocky Linux

SUSE

openSUSE

Alpine

Oracle Linux

Advisories 19

References