Lucene search
PRIOn knowledge basePRION:CVE-2022-31130HistoryOct 13, 2022 - 11:15 p.m.
Design/Logic Flaw
2022-10-1323:15:00
PRIOn knowledge base
www.prio-n.com
10
grafana
authentication tokens
vulnerability
data visualization
api keys
jwt authentication
Grafana is an open source observability and data visualization platform. Versions of Grafana for endpoints prior to 9.1.8 and 8.5.14 could leak authentication tokens to some destination plugins under some conditions. The vulnerability impacts data source and plugin proxy endpoints with authentication tokens. The destination plugin could receive a user’s Grafana authentication token. Versions 9.1.8 and 8.5.14 contain a patch for this issue. As a workaround, do not use API keys, JWT authentication, or any HTTP Header based authentication.
Related
ibm
ibm
osv
osv
Grafana Data source and plugin proxy endpoints leaking authentication tokens to some destination plugins in github.com/grafana/grafana
2024-06-05 15:10:42
Grafana Data source and plugin proxy endpoints leaking authentication tokens to some destination plugins
2024-05-14 22:25:26
BIT-grafana-2022-31130
2024-03-06 10:56:13
redhatcve
redhatcve
CVE-2022-31130
2022-10-14 05:59:13
github
github
alpinelinux
alpinelinux
CVE-2022-31130
2022-10-13 23:15:00
veracode
veracode
Information Disclosure
2022-10-17 11:15:16
nvd
nvd
CVE-2022-31130
2022-10-13 23:15:09
nessus
nessus
cve
cve
CVE-2022-31130
2022-10-13 23:15:09
cgr
cgr
CVE-2022-31130 vulnerabilities
2024-05-19 03:07:16
ubuntucve
ubuntucve
CVE-2022-31130
2022-10-13 00:00:00
openvas
openvas
Grafana Privilege Escalation Vulnerability (GHSA-jv32-5578-pxjc)
2022-10-18 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:0362-1)
2023-02-13 00:00:00
openSUSE: Security Advisory for grafana (SUSE-SU-2023:0362-1)
2024-03-04 00:00:00
cvelist
cvelist
freebsd
freebsd
Grafana -- Data source and plugin proxy endpoints leaking authentication tokens to some destination plugins
2022-06-26 00:00:00
Grafana -- Improper authentication
2022-09-07 00:00:00
Grafana -- Plugin signature bypass
2022-07-04 00:00:00
almalinux
almalinux
Moderate: grafana security and enhancement update
2023-11-07 00:00:00
redhat
redhat
oraclelinux
oraclelinux
grafana security and enhancement update
2023-11-11 00:00:00
wallarmlab
wallarmlab
Q4-2022 API ThreatStats™ Report
2023-02-22 16:02:55
altlinux
altlinux
Security fix for the ALT Linux 10 package grafana version 8.5.20-alt1
2023-01-31 00:00:00
redos
redos
ROS-20240404-01
2024-04-04 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2023
2023-04-18 00:00:00