Lucene search
Alpine Linux Development TeamALPINE:CVE-2023-2183HistoryJun 06, 2023 - 7:15 p.m.
CVE-2023-2183
2023-06-0619:15:00
Alpine Linux Development Team
security.alpinelinux.org
9
grafana
viewer role
api
access validation
abuse risk
spamming
security update
phishing attack
observability
monitoring
open-source
0.001 Low
EPSS
Percentile
40.0%
Grafana is an open-source platform for monitoring and observability.
The option to send a test alert is not available from the user panel UI for users having the Viewer role. It is still possible for a user with the Viewer role to send a test alert using the API as the API does not check access to this function.
This might enable malicious users to abuse the functionality by sending multiple alert messages to e-mail and Slack, spamming users, prepare Phishing attack or block SMTP server.
Users may upgrade to version 9.5.3, 9.4.12, 9.3.15, 9.2.19 and 8.5.26 to receive a fix.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | 3.18-community | noarch | grafana | = 9.5.2-r4 | UNKNOWN |
Related
nessus
nessus
ibm
ibm
cve
cve
CVE-2023-2183
2023-06-06 19:15:11
osv
osv
Grafana Improper Access Control vulnerability
2023-06-06 21:30:18
CVE-2023-2183
2023-06-06 19:15:11
BIT-grafana-2023-2183
2024-03-06 10:53:35
nvd
nvd
CVE-2023-2183
2023-06-06 19:15:11
ubuntucve
ubuntucve
CVE-2023-2183
2023-06-06 00:00:00
openvas
openvas
veracode
veracode
Access Control Bypass
2023-06-15 10:35:19
cvelist
cvelist
CVE-2023-2183
2023-06-06 18:04:26
redhatcve
redhatcve
CVE-2023-2183
2023-06-13 15:35:43
prion
prion
Design/Logic Flaw
2023-06-06 19:15:00
github
github
freebsd
freebsd
Grafana -- Broken access control: viewer can send test alerts
2023-06-06 00:00:00
Grafana -- Grafana DS proxy race condition
2023-06-06 00:00:00
redhat
redhat
redos
redos
ROS-20240404-01
2024-04-04 00:00:00