| Package | Affected versions | Patched versions |
|---|---|---|
| grafana | = 12.4.0≥ 11.6.0, ≤ 11.6.13≥ 12.1.0, ≤ 12.1.9≥ 12.2.0, ≤ 12.2.7≥ 12.3.0, ≤ 12.3.5 |
The public dashboard deletion endpoint does not enforce organization isolation, allowing an Org Admin in one organization to delete public dashboards belonging to a different organization by supplying the target dashboard's identifiers.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free