p PatchFirst

CVE-2023-2801

CVE-2023-2801

Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.

Grafana is an open-source platform for monitoring and observability. Using public dashboards users can query multiple distinct data sources using mixed queries. However such query has a possibility of crashing a Grafana instance. The only feature that uses mixed queries at the moment is public dashboards, but it's also possible to cause this by calling the query API directly. This might enable malicious users to crash Grafana instances through that endpoint. Users may upgrade to version 9.4.12 and 9.5.3 to receive a fix.

CVSS 7.5 · Alta · EPSS 0,7% · Corrección disponible

Publicación
Actualización

Pila tecnológica: system · applications

Productos y versiones afectados

  • grafana

    Versiones
    • ≥ 9.4.0, < 9.4.12: Afectada (semver)
    • ≥ 9.5.0, < 9.5.3: Afectada (semver)

    Actualiza a 9.4.12; Actualiza a 9.5.3

  • grafana Ubuntu:16.04:LTS

    Versiones
    • 2.6.0+dfsg-1
    Intervalos de versiones afectados
    • ECOSYSTEM: (−∞, +∞)

    Sin corrección publicada

Fuentes originales

Comprueba tu servidor →