| Package | Affected versions | Patched versions |
|---|---|---|
| grafana | ≥ 2.0.0, < 5.4.5≥ 6.0.0, < 6.3.4 | 5.4.56.3.4 |
In Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This makes it possible to run a denial of service attack against the server running Grafana.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free