Go/github.com/grafana/grafana CVE-2022-31130: unknown, EPSS 1.33%
Grafana Data source and plugin proxy endpoints leaking authentication tokens to some destination plugins in github.com/grafana/grafana
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GO-2024-2851
- https://github.com/grafana/grafana/security/advisories/GHSA-jv32-5578-pxjc
- https://nvd.nist.gov/vuln/detail/CVE-2022-31130
- https://github.com/grafana/grafana/commit/4dd56e4dabce10007bf4ba1059bf54178c35b177
- https://github.com/grafana/grafana/commit/9da278c044ba605eb5a1886c48df9a2cb0d3885f
- https://github.com/grafana/grafana/releases/tag/v9.1.8
CVE-2022-31130 · published · modified · JSON