CVE-2024-11741
CVE-2024-11741
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Grafana is an open-source platform for monitoring and observability. The Grafana Alerting VictorOps integration was not properly protected and could be exposed to users with Viewer permission. Fixed in versions 11.5.0, 11.4.1, 11.3.3, 11.2.6, 11.1.11, 11.0.11 and 10.4.15
CVSS 4.3 · Medium · EPSS 0.4% · Fix available
- Published
- Updated
Stack: system · applications
Affected products and versions
grafana
- Versions
- ≥ 11.4.0, < 11.4.1: Affected (custom)
- ≥ 11.3.0, < 11.3.3: Affected (custom)
- ≥ 11.2.0, < 11.2.6: Affected (custom)
- ≥ 11.1.0, < 11.1.11: Affected (custom)
- ≥ 10.4.0, < 10.4.15: Affected (custom)
Update to 10.4.15; Update to 11.1.11; Update to 11.2.6; Update to 11.3.3; Update to 11.4.1
grafana Ubuntu:16.04:LTS
- Versions
- 2.6.0+dfsg-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published