CVE-2022-26148

Mô tả

Tham khảo

• 2k8.org/post-319.html · Exploit
• security.netapp.com/advisory/ntap-20220425-0005 · Third Party Advisory

Lỗ hổng khác của grafana

• CVE-2026-14199CAO 8.1Only self-managed Grafana instances with Auth Proxy authentication and identity caching enabled (sync_ttl greater than zero) are affected. T…
• CVE-2026-8609CAO 7.5An unauthenticated attacker can repeatedly call Grafana's OAuth login route with unique values, causing unbounded memory growth that can eve…
• CVE-2026-8595TRUNG BÌNH 5.4A user with Editor permissions can craft a dashboard whose table (TableNG) panel contains a malicious field name that executes as a script i…
• CVE-2026-33382CAO 7.5Several Grafana API endpoints, some of them unauthenticated, do not limit the size of the request body before processing it. An attacker can…
• CVE-2026-28378THẤP 2.7The public dashboard deletion endpoint does not enforce organization isolation, allowing an Org Admin in one organization to delete public d…