Vulnetix
Try Vulnetix Request Demo
CVE-2024-1442 PUBLISHED

A user with the permissions to create a data source can use Grafana API to create a data source with UID set to *. Doing this will grant the user access to read, query, edit and delete all data sources within the organization.

EPSS 0.21% · 43.2th percentile

Risk Scores

EPSS Score
0.21%
43.2th percentile

Affected Products

VendorProductVersions
Bitnamigrafana8.5.0, 10.0.0, 10.1.0
Bitnamigrafana8.5.0, 10.1.0, 10.2.0

Timeline

References

Open in Interactive Console →