Lucene search
PRIOn knowledge basePRION:CVE-2023-2801HistoryJun 06, 2023 - 7:15 p.m.
Design/Logic Flaw
2023-06-0619:15:00
PRIOn knowledge base
www.prio-n.com
10
grafana
vulnerability
crash
instance
mixed queries
public dashboards
query api
fix
version 9.4.12
version 9.5.3
Grafana is an open-source platform for monitoring and observability.
Using public dashboards users can query multiple distinct data sources using mixed queries. However such query has a possibility of crashing a Grafana instance.
The only feature that uses mixed queries at the moment is public dashboards, but it’s also possible to cause this by calling the query API directly.
This might enable malicious users to crash Grafana instances through that endpoint.
Users may upgrade to version 9.4.12 and 9.5.3 to receive a fix.
Related
alpinelinux
alpinelinux
CVE-2023-2801
2023-06-06 19:15:00
osv
osv
CVE-2023-2801
2023-06-06 19:15:11
BIT-grafana-2023-2801
2024-03-06 10:53:15
Grafana Missing Synchronization vulnerability
2023-06-06 21:30:18
ibm
ibm
veracode
veracode
Denial Of Service (DoS)
2023-06-16 02:40:46
redhatcve
redhatcve
CVE-2023-2801
2023-06-13 15:35:48
ubuntucve
ubuntucve
CVE-2023-2801
2023-06-06 00:00:00
openvas
openvas
Grafana < 9.4.12, 9.5.0 < 9.5.3 DoS Vulnerability
2023-06-07 00:00:00
nvd
nvd
CVE-2023-2801
2023-06-06 19:15:11
nessus
nessus
github
github
Grafana Missing Synchronization vulnerability
2023-06-06 21:30:18
cvelist
cvelist
CVE-2023-2801
2023-06-06 18:03:32
cve
cve
CVE-2023-2801
2023-06-06 19:15:11
freebsd
freebsd
Grafana -- Grafana DS proxy race condition
2023-06-06 00:00:00
Grafana -- Broken access control: viewer can send test alerts
2023-06-06 00:00:00
redhat
redhat