tocsin

Alpine/grafana: high 7.5

The public dashboard query endpoint does not limit request body size before processing, allowing unauthenticated attackers to trigger excessive memory allocation by sending arbitrarily large JSON payl

Action: Upgrade grafana to 12.4.4-r0 or later.

Affected

introducedfixedlast affected
12.2.012.4.4-r0-

Fixed versions

12.4.4-r0

Sources

published · modified · JSON