Alpine/grafana: high 7.5
One of the usage insights HTTP API endpoints in Grafana Enterprise 6.x before 6.7.6, 7.x before 7.3.10, and 7.4.x before 7.4.5 is accessible without any authentication. This allows any unauthenticated
Action: Upgrade grafana to 7.4.5-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 6.0.0 | 7.4.5-r0 | - |
Fixed versions
| 7.4.5-r0 |
Sources
- osv: ALPINE-CVE-2021-28148#Alpine:v3.17/grafana
- https://security.alpinelinux.org/vuln/CVE-2021-28148
published · modified · JSON