Go/github.com/grafana/grafana CVE-2024-6322: medium 5.4, EPSS 0.30%
Grafana plugin data sources vulnerable to access control bypass in github.com/grafana/grafana
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GO-2024-3079
- nvd: CVE-2024-6322
- https://github.com/advisories/GHSA-hh8p-374f-qgr5
- https://github.com/grafana/grafana/commit/4cb3ba5d1a7ab8b9676034e89dada2fcde1766ef
- https://github.com/grafana/grafana/commit/9cdba084a9100c6b11d32eef9d2bd53656c6964a
- https://grafana.com/security/security-advisories/cve-2024-6322
CVE-2024-6322 · published · modified · JSON