Red Hat Security AdvisoryRHSA-2020:2676
grafana security update
Released 2020-06-23 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v. 8.1) grafana-6.2.2-6.el8_1, grafana-azure-monitor-6.2.2-6.el8_1, grafana-cloudwatch-6.2.2-6.el8_1 +10
Fixes 1 record
Priority HIGH 81
The avatar feature in Grafana 3.0.1 through 7.0.1 has an SSRF Incorrect Access Control issue.
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.99856 · Published 2020-06-03 · Partial fix · 6.7.4, 7.0.2 CWE-918
