Go/github.com/grafana/grafana CVE-2022-35957: medium 6.6, EPSS 1.63%
Grafana Escalation from admin to server admin when auth proxy is used
Action: Upgrade github.com/grafana/grafana to 8.5.13 or later.
go get github.com/grafana/grafana@v9.1.6go get github.com/grafana/grafana@v9.0.9go get github.com/grafana/grafana@v8.5.13Affected
| introduced | fixed | last affected |
|---|---|---|
| 9.1.0 | 9.1.6 | - |
| 9.0.0 | 9.0.9 | - |
| 0 | 8.5.13 | - |
Fixed versions
| 9.1.6 | 9.0.9 | 8.5.13 |
Sources
- osv: GHSA-ff5c-938w-8c9q
- https://github.com/grafana/grafana/security/advisories/GHSA-ff5c-938w-8c9q
- https://nvd.nist.gov/vuln/detail/CVE-2022-35957
- https://github.com/grafana/grafana
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WYU5C2RITLHVZSTCWNGQWA6KSPYNXM2H
- https://security.netapp.com/advisory/ntap-20221215-0001
CVE-2022-35957 · published · modified · JSON