~ / search / GHSA-66c4-2g2v-54qw

GHSA-66c4-2g2v-54qw

Grafana org admin can delete pending invites in different org

Source: GitHub Advisory Database (reviewed) Low CVE-2024-10452

Packages

EcosystemPackageAffectedFixed in
Go github.com/grafana/grafana <= 10.4.0 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Organization admins can delete pending invites created in an organization they are not part of.

References

External links from the advisory. They lead to third-party sites.