Grafana Arbitrary File Read

Description

References

• nvd.nist.gov/vuln/detail/CVE-2019-19499 · ADVISORY
• grafana/grafana#20192 · WEB
• grafana/grafana commit 19dbd27 · WEB
• grafana/grafana · PACKAGE
• grafana/grafana · WEB
• security.netapp.com/advisory/ntap-20200918-0003 · WEB
• security.netapp.com/advisory/ntap-20200918-0003 · Third Party Advisory
• swarm.ptsecurity.com/grafana-6-4-3-arbitrary-file-read · Exploit
• swarm.ptsecurity.com/grafana-6-4-3-arbitrary-file-read · WEB

Altre vulnerabilità di github.com/grafana/grafana

• CVE-2026-42127ALTO 7.5The public dashboard query endpoint does not limit request body size before processing, allowing unauthenticated attackers to trigger excess…
• CVE-2026-9029MEDIO 5.4A user with Editor permissions can place a malicious script in the attribution field of a Geomap panel's XYZ tile layer via a template varia…
• CVE-2026-42129ALTO 7.7A user with Viewer permissions can use a path traversal in the Loki data source plugin to reach administrative Loki endpoints and read sensi…
• CVE-2026-10601MEDIO 4.3A user with Viewer permissions can use specially crafted requests to the Tempo and Loki data source plugins to reach unintended backend endp…
• CVE-2026-33381ALTO 8.1When a user's access to mint tokens for a service account is revoked, it is sometimes still possible to do so for a few seconds after the ev…