| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/grafana/grafana | ≥ 10.0.0, < 10.0.12≥ 10.1.0, < 10.1.8≥ 10.2.0, < 10.2.5≥ 10.3.0, < 10.3.4≥ 8.5.0, < 9.5.7all versions | 10.0.1210.1.810.2.510.3.49.5.7 |
| grafana | ≥ 10.0.0, < 10.0.12≥ 10.1.0, < 10.1.8≥ 10.2.0, < 10.2.5≥ 10.3.0, < 10.3.4≥ 8.5.0, < 9.5.7 | 10.0.1210.1.810.2.510.3.49.5.7 |
A user with the permissions to create a data source can use Grafana API to create a data source with UID set to *. Doing this will grant the user access to read, query, edit and delete all data sources within the organization.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free