Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo

Web Hosting

Grafana

The open-source platform for monitoring and observability.

Official Site:

https://grafana.com/get

Severity Summary:

Critical: 6 High: 23 Medium: 36 Low: 3
Reference
Title
Severity
CVE-2022-26148
Grafana Cleartext Storage of Sensitive Information Vulnerability
Critical
CVE-2020-27846
Grafana Signature Verification Vulnerability
Critical
CVE-2023-3128
Grafana Authentication Bypass by Spoofing Vulnerability
Critical
CVE-2018-15727
Grafana Improper Authentication Vulnerability
Critical
CVE-2022-28660
Grafana Missing Authentication for Critical Function Vulnerability
Critical
CVE-2021-41244
Grafana Externally Controlled Reference to a Resource in Another Sphere Vulnerability
Critical
CVE-2022-31107
Grafana Incorrect Authorization Vulnerability
High
CVE-2022-21703
Grafana Cross-Site Request Forgery (CSRF) Vulnerability
High
CVE-2021-27358
Grafana Vulnerability
High
CVE-2022-29170
Grafana URL Redirection to Untrusted Site (Open Redirect) Vulnerability
High
CVE-2022-32275
Grafana Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability
High
CVE-2022-32276
Grafana Improper Authentication Vulnerability
High
CVE-2022-31130
Grafana Insufficiently Protected Credentials Vulnerability
High
CVE-2022-39201
Grafana Vulnerability
High
CVE-2022-31123
Grafana Improper Verification of Cryptographic Signature Vulnerability
High
CVE-2022-39328
Grafana Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition) Vulnerability
High
CVE-2022-39306
Grafana Improper Input Validation Vulnerability
High
CVE-2022-23498
Grafana Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
High
CVE-2023-1387
Grafana Vulnerability
High
CVE-2023-4822
Grafana Vulnerability
High
CVE-2023-4399
Grafana Vulnerability
High
CVE-2024-9264
Grafana Improper Neutralization of Special Elements used in a Command (Command Injection) Vulnerability
High
CVE-2021-43798
Grafana Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability
High
CVE-2024-1442
Grafana Vulnerability
High
CVE-2021-39226
Grafana Improper Authentication Vulnerability
High
CVE-2019-15043
Grafana Missing Authentication for Critical Function Vulnerability
High
CVE-2021-28148
Grafana Improper Authentication Vulnerability
High
CVE-2020-13379
Grafana Server-Side Request Forgery (SSRF) Vulnerability
High
CVE-2021-27962
Grafana Incorrect Permission Assignment for Critical Resource Vulnerability
High
CVE-2023-22462
Grafana Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium