CVE-2022-31123

Go/github.com/grafana/grafana CVE-2022-31123: medium 6.1, EPSS 0.27%

Grafana Plugin signature bypass

Action: Upgrade github.com/grafana/grafana to 8.5.14 or later.

go get github.com/grafana/grafana@v9.1.8

go get github.com/grafana/grafana@v8.5.14

Affected

Fixed versions

Sources

• osv: GHSA-rhxj-gh46-jvw8
• https://github.com/grafana/grafana/security/advisories/GHSA-rhxj-gh46-jvw8
• https://nvd.nist.gov/vuln/detail/CVE-2022-31123
• https://github.com/grafana/grafana
• https://github.com/grafana/grafana/releases/tag/v9.1.8
• https://security.netapp.com/advisory/ntap-20221124-0002

CVE-2022-31123 · published 2024-05-14T22:22:57Z · modified 2026-09-10T03:50:14.301043544Z · JSON

Go/github.com/grafana/grafana CVE-2022-31123: unknown, EPSS 0.27%

Grafana Plugin signature bypass in github.com/grafana/grafana

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2024-2855
• https://github.com/grafana/grafana/security/advisories/GHSA-rhxj-gh46-jvw8
• https://nvd.nist.gov/vuln/detail/CVE-2022-31123
• https://github.com/grafana/grafana/releases/tag/v9.1.8
• https://security.netapp.com/advisory/ntap-20221124-0002

CVE-2022-31123 · published 2024-06-05T15:10:42Z · modified 2026-02-04T04:20:50.531977Z · JSON