Lucene search

K
osvGoogleOSV:GHSA-H5RH-W6VM-9GHC
HistoryFeb 15, 2022 - 1:57 a.m.

Denial of service in Grafana

2022-02-1501:57:18
Google
osv.dev
38

7.4 High

AI Score

Confidence

High

0.031 Low

EPSS

Percentile

91.1%

The snapshot feature in Grafana before 7.4.2 can allow an unauthenticated remote attackers to trigger a Denial of Service via a remote API call if a commonly used configuration is set.

Specific Go Packages Affected

github.com/grafana/grafana/pkg/middleware

7.4 High

AI Score

Confidence

High

0.031 Low

EPSS

Percentile

91.1%