Go/github.com/grafana/grafana CVE-2024-1442: medium 6, EPSS 0.80%
Grafana's users with permissions to create a data source can CRUD all data sources
Action: Upgrade github.com/grafana/grafana to 9.5.7 or later.
go get github.com/grafana/grafana@v9.5.7go get github.com/grafana/grafana@v10.0.12go get github.com/grafana/grafana@v10.1.8go get github.com/grafana/grafana@v10.2.5go get github.com/grafana/grafana@v10.3.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 8.5.0 | 9.5.7 | - |
| 10.0.0 | 10.0.12 | - |
| 10.1.0 | 10.1.8 | - |
| 10.2.0 | 10.2.5 | - |
| 10.3.0 | 10.3.4 | - |
Fixed versions
| 9.5.7 | 10.0.12 | 10.1.8 | 10.2.5 | 10.3.4 |
Sources
- osv: GHSA-5mxf-42f5-j782
- https://nvd.nist.gov/vuln/detail/CVE-2024-1442
- https://github.com/grafana/grafana
- https://grafana.com/security/security-advisories/cve-2024-1442
- https://security.netapp.com/advisory/ntap-20241122-0007
CVE-2024-1442 · published · modified · JSON