Red Hat Security Advisory

RHSA-2024:8083

grafana security update

Released 2024-10-14 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream AUS (v.8.4) grafana-7.3.6-7.el8_4
Red Hat Enterprise Linux AppStream E4S (v.8.4) grafana-7.3.6-7.el8_4
Red Hat Enterprise Linux AppStream TUS (v.8.4) grafana-7.3.6-7.el8_4

Fixes 1 record

TI-2024-14246 CVE-2024-21489 · GHSA-34q8-jcq6-mc37

Prototype pollution in uplot

HIGH 77

Versions of the package uplot before 1.6.31 are vulnerable to Prototype Pollution via the uplot.assign function due to missing check if the attribute resolves to the object prototype.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.0071 Published 2024-10-01 Partial fix · 1.6.31 CWE-1321