| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/grafana/grafana | ≥ 6.7.3, < 7.4.2 | 7.4.2 |
| grafana | ≥ 6.7.3, ≤ 7.4.1 |
The snapshot feature in Grafana before 7.4.2 can allow an unauthenticated remote attackers to trigger a Denial of Service via a remote API call if a commonly used configuration is set.
github.com/grafana/grafana/pkg/middleware
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free