BIT-grafana-2022-32276

vendorUSosv

view advisory published 2024-03-06Licence: per source

Grafana 8.4.3 allows unauthenticated access via (for example) a /dashboard/snapshot/*?orgId=0 URI. NOTE: the vendor considers this a UI bug, not a vulnerability

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2022-32276US	high7.5	3.89% (90th)	—	2022-06-17
Grafana 8.4.3 allows unauthenticated access via (for example) a /dashboard/snapshot/*?orgId=0 URI. NOTE: the vendor considers this a UI bug, not a vulnerability

references

External citations — patches, advisories, analysis.

https://github.com/BrotherOfJhonny/grafana/blob/main/README.mdADVISORY
https://github.com/grafana/grafana/issues/50336ADVISORY
https://nvd.nist.gov/vuln/detail/CVE-2022-32276WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan