Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-39328
HistoryNov 08, 2022 - 11:15 p.m.

Race condition

2022-11-0823:15:00
PRIOn knowledge base
www.prio-n.com
10
grafana
open-source
platform
9.2.0
9.2.4
race condition
authentication
logic

7.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.0%

Grafana is an open-source platform for monitoring and observability. Versions starting with 9.2.0 and less than 9.2.4 contain a race condition in the authentication middlewares logic which may allow an unauthenticated user to query an administration endpoint under heavy load. This issue is patched in 9.2.4. There are no known workarounds.

CPENameOperatorVersion
grafanage9.2.0
grafanalt9.2.4

7.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.0%