Lucene search
Alpine Linux Development TeamALPINE:CVE-2023-2801HistoryJun 06, 2023 - 7:15 p.m.
CVE-2023-2801
2023-06-0619:15:00
Alpine Linux Development Team
security.alpinelinux.org
14
grafana
open-source
vulnerability
crashing
instances
upgrade
fix
query
api
0.001 Low
EPSS
Percentile
43.8%
Grafana is an open-source platform for monitoring and observability.
Using public dashboards users can query multiple distinct data sources using mixed queries. However such query has a possibility of crashing a Grafana instance.
The only feature that uses mixed queries at the moment is public dashboards, but it’s also possible to cause this by calling the query API directly.
This might enable malicious users to crash Grafana instances through that endpoint.
Users may upgrade to version 9.4.12 and 9.5.3 to receive a fix.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | 3.18-community | noarch | grafana | = 9.5.2-r4 | UNKNOWN |
Related
osv
osv
BIT-grafana-2023-2801
2024-03-06 10:53:15
Grafana Missing Synchronization vulnerability
2023-06-06 21:30:18
CVE-2023-2801
2023-06-06 19:15:11
veracode
veracode
Denial Of Service (DoS)
2023-06-16 02:40:46
prion
prion
Design/Logic Flaw
2023-06-06 19:15:00
redhatcve
redhatcve
CVE-2023-2801
2023-06-13 15:35:48
ubuntucve
ubuntucve
CVE-2023-2801
2023-06-06 00:00:00
ibm
ibm
nessus
nessus
openvas
openvas
Grafana < 9.4.12, 9.5.0 < 9.5.3 DoS Vulnerability
2023-06-07 00:00:00
nvd
nvd
CVE-2023-2801
2023-06-06 19:15:11
github
github
Grafana Missing Synchronization vulnerability
2023-06-06 21:30:18
cvelist
cvelist
CVE-2023-2801
2023-06-06 18:03:32
cve
cve
CVE-2023-2801
2023-06-06 19:15:11
freebsd
freebsd
Grafana -- Broken access control: viewer can send test alerts
2023-06-06 00:00:00
Grafana -- Grafana DS proxy race condition
2023-06-06 00:00:00
redhat
redhat