Read the docs
Red Hat Security Advisory

RHSA-2024:0746

new container image: rhceph-5.3

Released 2024-02-08 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 9 records

TI-2023-01311 CVE-2023-1387 · GHSA-c3h9-vpfv-3x4m

Information disclosure in Grafana

Priority HIGH 66

Grafana is an open-source platform for monitoring and observability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01504 Published 2023-04-26 Partial fix · 9.2.17, 9.3.13 +1 CWE-200
TI-2023-10998 CVE-2023-25725 · GHSA-h2p2-w857-329f

HAProxy before 2.7.3 may allow a bypass of access control because HTTP/1 headers are…

Priority MEDIUM 54

HAProxy before 2.7.3 may allow a bypass of access control because HTTP/1 headers are inadvertently lost in some situations, aka "request smuggling." The HTTP header parsers in HAProxy may accept empty header field names,…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.05493 Published 2023-02-14 Partial fix CWE-444
TI-2023-00481 CVE-2023-0507 · GHSA-hjv9-hm2f-rpcj

Cross-site scripting in Grafana

Priority MEDIUM 50

Grafana is an open-source platform for monitoring and observability.

CVSS 3.1HIGH 7.3 Network Low privileges User interaction EPSS 0.1546 Published 2023-03-01 Partial fix · 8.5.21, 9.2.13 +1 CWE-79
TI-2023-10159 CVE-2023-24538 · GHSA-v4m2-x4rp-hv22

Backticks not treated as string delimiters in html/template

Priority MEDIUM 47

Templates do not properly consider backticks (`) as Javascript string delimiters, and do not escape them as expected.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02281 Published 2023-04-06 Partial fix · 1.19.8, 1.20.3 CWE-94
TI-2023-00563 CVE-2023-0594 · GHSA-xw5p-hw8j-xg4q

Cross-site scripting in Grafana

Priority MEDIUM 46

Grafana is an open-source platform for monitoring and observability.

CVSS 3.1HIGH 7.3 Network Low privileges User interaction EPSS 0.09216 Published 2023-03-01 Partial fix · 8.5.21, 9.2.13 +1 CWE-79
TI-2023-08711 CVE-2023-22462 · GHSA-7rqg-hjwc-6mjf

Stored XSS in Grafana Text plugin

Priority LOW 34

Grafana is an open-source platform for monitoring and observability.

CVSS 3.1MEDIUM 6.4 Network Low privileges User interaction EPSS 0.01562 Published 2023-03-02 Partial fix · 9.2.10, 9.3.4 CWE-79
TI-2023-00052 CVE-2023-0056 · GHSA-43q4-pf55-3xhc

Uncontrolled resource consumption in haproxy

Priority LOW 33

An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the service.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01834 Published 2023-03-23 Partial fix CWE-400