Lucene search

K
redhatcveRedhat.comRH:CVE-2023-2183
HistoryJun 13, 2023 - 3:35 p.m.

CVE-2023-2183

2023-06-1315:35:43
redhat.com
access.redhat.com
10
flaw
grafana
unauthorized access
alert messages
api

6.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

0.001 Low

EPSS

Percentile

40.0%

A flaw was found in grafana. This issue may allow a malicious user to craft a request to the API that enables them to send alert messages via the “API Alert - Test”.

6.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

0.001 Low

EPSS

Percentile

40.0%