Red Hat Security Advisory

RHSA-2021:1859

grafana security, bug fix, and enhancement update

Released 2021-05-18 · Red Hat rating Moderate · View on Red Hat →

Fixed in

TI-2020-16916 CVE-2020-27846 · GHSA-4hq8-gmxx-h6w9

MEDIUM 50

A signature verification vulnerability exists in crewjam/saml.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04931 Published 2020-12-21 Partial fix · 0.4.3 CWE-115

TI-2020-14871 CVE-2020-24303 · GHSA-mvpr-q6rh-8vrp

LOW 31

Grafana before 7.1.0-beta 1 allows XSS via a query alias for the ElasticSearch datasource.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02078 Published 2020-10-28 Partial fix · 7.1.0-beta1 CWE-79