CVE-2021-27358
CVE-2021-27358
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The snapshot feature in Grafana 6.7.3 through 7.4.1 can allow an unauthenticated remote attackers to trigger a Denial of Service via a remote API call if a commonly used configuration is set.
CVSS 7.5 · High · EPSS 83.0% · Public exploit
- Published
- Updated
Stack: system · applications
Affected products and versions
Original sources
- https://github.com/grafana/grafana/blob/master/CHANGELOG.md
- https://grafana.com/docs/grafana/latest/release-notes/release-notes-7-4-2/
- https://github.com/grafana/grafana/blob/master/CHANGELOG.md#742-2021-02-17
- https://security.netapp.com/advisory/ntap-20210513-0007/
- https://nvd.nist.gov/vuln/detail/CVE-2021-27358