Red Hat Security Advisory

RHSA-2020:2792

OpenShift Container Platform 4.4.11 grafana-container security update

Released 2020-07-06 · Red Hat rating Moderate · View on Red Hat →

Fixed in

TI-2020-10491 CVE-2020-13379 · GHSA-wc9w-wvq2-ffm9

HIGH 81

The avatar feature in Grafana 3.0.1 through 7.0.1 has an SSRF Incorrect Access Control issue.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.99856 Published 2020-06-03 Partial fix · 6.7.4, 7.0.2 CWE-918