Grafana Alerting VictorOps integration could be exposed to users with Viewer permission
Grafana is an open-source platform for monitoring and observability. The Grafana Alerting VictorOps integration was not properly protected and could be exposed to users with Viewer permission. Fixed in versions 11.5.0, 11.4.1, 11.3.3, 11.2.6, 11.1.11, 11.0.11 and 10.4.15
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-11741US | — | — | ||
Grafana is an open-source platform for monitoring and observability.
The Grafana Alerting VictorOps integration was not properly protected and could be exposed to users with Viewe… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://github.com/grafana/grafanaPACKAGE
- https://github.com/grafana/grafana/commit/70073427041e15c353e0d467b714527584765aeaWEB
- https://grafana.com/security/security-advisories/cve-2024-11741WEB
- https://nvd.nist.gov/vuln/detail/CVE-2024-11741ADVISORY
- https://pkg.go.dev/vuln/GO-2025-3438WEB
- https://security.netapp.com/advisory/ntap-20250509-0006WEB
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan