Go/github.com/grafana/grafana CVE-2018-15727: critical 9.8, EPSS 64.28%
Grafana Authentication Bypass
Action: Upgrade github.com/grafana/grafana to 4.6.4 or later.
go get github.com/grafana/grafana@v4.6.4go get github.com/grafana/grafana@v5.2.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.6.4 | - |
| 5.0.0 | 5.2.3 | - |
Fixed versions
| 4.6.4 | 5.2.3 |
Sources
- osv: GHSA-rgjg-66cx-5x9m
- https://nvd.nist.gov/vuln/detail/CVE-2018-15727
- https://github.com/grafana/grafana/commit/7baecf0d0deae0d865e45cf03e082bc0db3f28c3
- https://github.com/grafana/grafana/commit/df83bf10a225811927644bdf6265fa80bdea9137
- https://access.redhat.com/errata/RHSA-2018:3829
- https://access.redhat.com/errata/RHSA-2019:0019
- https://grafana.com/blog/2018/08/29/grafana-5.2.3-and-4.6.4-released-with-important-security-fix
- https://www.securityfocus.com/bid/105184
CVE-2018-15727 · published · modified · JSON