Security
فارسی
All products

OpenShift Service Mesh 2.1/openshift-service-mesh/grafana-rhel8

Red Hat · Package
7 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Grafana Email addresses and usernames can not be trustedCVE-2022-39306 · GHSA-2X6G-H2HG-RQ84Version ranges need review. github.com/grafana/grafanaOpenShift Service Mesh 2.0/openshift-service-mesh/grafana-rhel8 GoRed Hat High Fix reported
Grafana User enumeration via forget passwordCVE-2022-39307 · GHSA-3P62-42X7-GXG5Version ranges need review. github.com/grafana/grafanaOpenShift Service Mesh 2.0/openshift-service-mesh/grafana-rhel8 GoRed Hat High Fix reported
Grafana Spoofing originalUrl of snapshotsCVE-2022-39324 · GHSA-4724-7JWC-3FPWVersion ranges need review. github.com/grafana/grafanaOpenShift Service Mesh 2.0/openshift-service-mesh/grafana-rhel8 GoRed Hat Medium Fix reported
Grafana API IDORCVE-2022-21713 · GHSA-63G3-9JQ3-MCCV github.com/grafana/grafanaOpenShift Service Mesh 2.0/servicemesh-grafana GoRed Hat Medium Fix reported
Grafana proxy Cross-site ScriptingCVE-2022-21702 · GHSA-XC3P-28HW-Q24G github.com/grafana/grafanaOpenShift Service Mesh 2.0/servicemesh-grafana GoRed Hat Medium Fix reported
Grafana Cross Site Request Forgery (CSRF)CVE-2022-21703 · GHSA-CMF4-H3XC-JW8W github.com/grafana/grafana/pkg/webOpenShift Service Mesh 2.0/servicemesh-grafana GoRed Hat Medium Fix reported
grafana: An information leak issue was discovered in Grafana through 7.3.4, when integrated with ZabbixCVE-2022-26148 OpenShift Service Mesh 2.0/servicemesh-grafanaOpenShift Service Mesh 2.1/openshift-service-mesh/grafana-rhel8 Red Hat Medium No fix reported