Red Hat Security Advisory

RHSA-2020:2641

grafana security update

Released 2020-06-22 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) grafana-6.3.6-2.el8_2, grafana-azure-monitor-6.3.6-2.el8_2, grafana-cloudwatch-6.3.6-2.el8_2 +10

TI-2020-10491 CVE-2020-13379 · GHSA-wc9w-wvq2-ffm9

HIGH 81

The avatar feature in Grafana 3.0.1 through 7.0.1 has an SSRF Incorrect Access Control issue.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.99856 Published 2020-06-03 Partial fix · 6.7.4, 7.0.2 CWE-918