CVE-2023-3128
CVE-2023-3128
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Grafana is validating Azure AD accounts based on the email claim. On Azure AD, the profile email field is not unique and can be easily modified. This leads to account takeover and authentication bypass when Azure AD OAuth is configured with a multi-tenant app.
CVSS 9.4 · Critical · EPSS 4.0% · Fix available
- Published
- Updated
Stack: system · applications
Affected products and versions
grafana
- Versions
- ≥ 9.5.0, < 9.5.4: Affected (semver)
- ≥ 9.4.0, < 9.4.13: Affected (semver)
- ≥ 9.3.0, < 9.3.16: Affected (semver)
- ≥ 9.2.0, < 9.2.20: Affected (semver)
- ≥ 6.7.0, < 8.5.27: Affected (semver)
Update to 8.5.27; Update to 9.2.20; Update to 9.3.16; Update to 9.4.13; Update to 9.5.4
grafana Ubuntu:16.04:LTS
- Versions
- 2.6.0+dfsg-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published