all InfoSec news
CVE-2023-2801 (grafana)
June 6, 2023, 7:15 p.m. |
National Vulnerability Database web.nvd.nist.gov
Using public dashboards users can query multiple distinct data sources using mixed queries. However such query has a possibility of crashing a Grafana instance.
The only feature that uses mixed queries at the moment is public dashboards, but it's also possible to cause this by calling the query API directly.
This might enable malicious users to crash Grafana instances through that endpoint.
Users may upgrade to version 9.4.12 and 9.5.3 to …
api cve dashboards data data sources grafana instance monitoring observability platform public query
More from web.nvd.nist.gov / National Vulnerability Database
CVE-2023-21380 (android)
7 months ago |
web.nvd.nist.gov
CVE-2023-21381 (android)
7 months ago |
web.nvd.nist.gov
Jobs in InfoSec / Cybersecurity
CyberSOC Technical Lead
@ Integrity360 | Sandyford, Dublin, Ireland
Cyber Security Strategy Consultant
@ Capco | New York City
Cyber Security Senior Consultant
@ Capco | Chicago, IL
Sr. Product Manager
@ MixMode | Remote, US
Corporate Intern - Information Security (Year Round)
@ Associated Bank | US WI Remote
Senior Offensive Security Engineer
@ CoStar Group | US-DC Washington, DC