BIT-grafana-2024-11741

vendorUSosv

view advisory published 2025-02-04Licence: per source

Grafana is an open-source platform for monitoring and observability. The Grafana Alerting VictorOps integration was not properly protected and could be exposed to users with Viewer permission. Fixed in versions 11.5.0, 11.4.1, 11.3.3, 11.2.6, 11.1.11, 11.0.11 and 10.4.15

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2024-11741US	—	0.41% (35th)	—	2025-01-31
Grafana is an open-source platform for monitoring and observability. The Grafana Alerting VictorOps integration was not properly protected and could be exposed to users with Viewe…

references

External citations — patches, advisories, analysis.

https://grafana.com/security/security-advisories/cve-2024-11741/WEB
https://nvd.nist.gov/vuln/detail/CVE-2024-11741WEB
https://security.netapp.com/advisory/ntap-20250509-0006/WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan