Alpine/grafana: medium 6.5
The team sync HTTP API in Grafana Enterprise 7.4.x before 7.4.5 has an Incorrect Access Control issue. On Grafana instances using an external authentication service, this vulnerability allows any auth
Action: Upgrade grafana to 7.4.5-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 7.4.0 | 7.4.5-r0 | - |
Fixed versions
| 7.4.5-r0 |
Sources
- osv: ALPINE-CVE-2021-28146#Alpine:v3.21/grafana
- https://security.alpinelinux.org/vuln/CVE-2021-28146
published · modified · JSON