Grafana Alerting VictorOps integration could be exposed to users with Viewer permission
Grafana is an open-source platform for monitoring and observability. The Grafana Alerting VictorOps integration was not properly protected and could be exposed to users with Viewer permission. Fixed in versions 11.5.0, 11.4.1, 11.3.3, 11.2.6, 11.1.11, 11.0.11 and 10.4.15
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-11741US | — | — | ||
Grafana is an open-source platform for monitoring and observability.
The Grafana Alerting VictorOps integration was not properly protected and could be exposed to users with Viewe… | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/grafana/grafanaPACKAGE
- https://github.com/grafana/grafana/commit/70073427041e15c353e0d467b714527584765aeaWEB
- https://grafana.com/security/security-advisories/cve-2024-11741WEB
- https://nvd.nist.gov/vuln/detail/CVE-2024-11741ADVISORY
- https://pkg.go.dev/vuln/GO-2025-3438WEB
- https://security.netapp.com/advisory/ntap-20250509-0006WEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan