Alpine/grafana: medium 6.5
The team sync HTTP API in Grafana Enterprise 6.x before 6.7.6, 7.x before 7.3.10, and 7.4.x before 7.4.5 has an Incorrect Access Control issue. On Grafana instances using an external authentication se
Action: Upgrade grafana to 7.4.5-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 6.0.0 | 7.4.5-r0 | - |
Fixed versions
| 7.4.5-r0 |
Sources
- osv: ALPINE-CVE-2021-28147#Alpine:v3.19/grafana
- https://security.alpinelinux.org/vuln/CVE-2021-28147
published · modified · JSON