Lucene search
GoogleOSV:RLSA-2021:1859HistoryMay 18, 2021 - 6:16 a.m.
Moderate: grafana security, bug fix, and enhancement update
2021-05-1806:16:06
Google
osv.dev
7
Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB.
The following packages have been upgraded to a later upstream version: grafana (7.3.6). (BZ#1850471)
Security Fix(es):
-
crewjam/saml: authentication bypass in saml authentication (CVE-2020-27846)
-
grafana: XSS via a query alias for the Elasticsearch and Testdata datasource (CVE-2020-24303)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Rocky Linux 8.4 Release Notes linked from the References section.
Related
nessus
nessus
RHEL 8 : grafana (RHSA-2021:1859)
2021-05-19 00:00:00
Rocky Linux 8 : grafana (RLSA-2021:1859)
2023-11-07 00:00:00
NewStart CGSL MAIN 6.02 : grafana Multiple Vulnerabilities (NS-SA-2022-0053)
2022-05-10 00:00:00
redhat
redhat
oraclelinux
oraclelinux
grafana security, bug fix, and enhancement update
2021-05-25 00:00:00
almalinux
almalinux
Moderate: grafana security, bug fix, and enhancement update
2021-05-18 06:16:06
rocky
rocky
grafana security, bug fix, and enhancement update
2021-05-18 06:16:06
fedora
fedora
[SECURITY] Fedora 33 Update: grafana-7.3.6-1.fc33
2021-01-05 01:26:51
[SECURITY] Fedora 32 Update: grafana-7.3.6-1.fc32
2021-01-05 01:19:14
redhatcve
redhatcve
osv
osv
XML Processing error in github.com/crewjam/saml
2021-06-23 17:29:42
BIT-grafana-2020-27846
2024-03-06 11:00:29
CVE-2020-27846
2020-12-21 16:15:13
prion
prion
Design/Logic Flaw
2020-12-21 16:15:00
Design/Logic Flaw
2020-10-28 14:15:00
github
github
XML Processing error in github.com/crewjam/saml
2021-06-23 17:29:42
Grafana XSS via a query alias for the ElasticSearch datasource
2022-05-24 17:32:32
cve
cve
CVE-2020-27846
2020-12-21 16:15:13
CVE-2020-24303
2020-10-28 14:15:12
openvas
openvas
Fedora: Security Advisory for grafana (FEDORA-2020-64e54abd9f)
2021-01-11 00:00:00
Fedora: Security Advisory for grafana (FEDORA-2020-968067abfa)
2021-01-11 00:00:00
Grafana < 7.1.0-beta1 XSS Vulnerability
2020-10-29 00:00:00
nvd
nvd
CVE-2020-27846
2020-12-21 16:15:13
CVE-2020-24303
2020-10-28 14:15:12
veracode
veracode
Insecure XML Parsing
2020-12-22 04:41:46
Cross-site Scripting (XSS)
2020-10-29 02:12:41
cvelist
cvelist
CVE-2020-27846
2020-12-21 15:16:14
CVE-2020-24303
2020-10-28 13:25:22
ubuntucve
ubuntucve
CVE-2020-24303
2020-10-28 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2299
2023-11-21 12:53:33