Alpine/grafana: high 7.1
Grafana Enterprise 7.2.x and 7.3.x before 7.3.10 and 7.4.x before 7.4.5 allows a dashboard editor to bypass a permission check concerning a data source they should not be able to access.
Action: Upgrade grafana to 7.4.5-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 7.2.0 | 7.4.5-r0 | - |
Fixed versions
| 7.4.5-r0 |
Sources
- osv: ALPINE-CVE-2021-27962#Alpine:v3.24/grafana
- https://security.alpinelinux.org/vuln/CVE-2021-27962
published · modified · JSON