Go/github.com/grafana/grafana CVE-2021-39226: high 7.3, exploited, EPSS 99.93%
Authentication bypass for viewing and deletions of snapshots
Action: Upgrade github.com/grafana/grafana to 7.5.11 or later.
go get github.com/grafana/grafana@v7.5.11go get github.com/grafana/grafana@v8.1.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7.5.11 | - |
| 8.0.0 | 8.1.6 | - |
Fixed versions
| 7.5.11 | 8.1.6 |
Sources
- osv: GHSA-69j6-29vr-p3j9
- kev: CVE-2021-39226
- https://github.com/grafana/grafana/security/advisories/GHSA-69j6-29vr-p3j9
- https://nvd.nist.gov/vuln/detail/CVE-2021-39226
- https://github.com/grafana/grafana/commit/2d456a6375855364d098ede379438bf7f0667269
- https://github.com/grafana/grafana
- https://grafana.com/docs/grafana/latest/release-notes/release-notes-7-5-11
- https://grafana.com/docs/grafana/latest/release-notes/release-notes-8-1-6
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DCKBFUSY6V4VU5AQUYWKISREZX5NLQJT
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E6ANHRDBXQT6TURLP2THM26ZPDINFBEG
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCKBFUSY6V4VU5AQUYWKISREZX5NLQJT
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E6ANHRDBXQT6TURLP2THM26ZPDINFBEG
- https://security.netapp.com/advisory/ntap-20211029-0008
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-39226
- http://www.openwall.com/lists/oss-security/2021/10/05/4
CVE-2021-39226 · published · modified · JSON