~ / search / GHSA-h5rh-w6vm-9ghc

GHSA-h5rh-w6vm-9ghc

Denial of service in Grafana

Source: GitHub Advisory Database (reviewed) Moderate CVE-2021-27358

Packages

EcosystemPackageAffectedFixed in
Go github.com/grafana/grafana >= 6.7.3, < 7.4.2 7.4.2

Details

As written in the advisory (Markdown source, shown as plain text).

The snapshot feature in Grafana before 7.4.2 can allow an unauthenticated remote attackers to trigger a Denial of Service via a remote API call if a commonly used configuration is set. ### Specific Go Packages Affected github.com/grafana/grafana/pkg/middleware

References

External links from the advisory. They lead to third-party sites.