CVE-2022-31130

Go/github.com/grafana/grafana CVE-2022-31130: medium 4.9, EPSS 1.33%

Grafana Data source and plugin proxy endpoints leaking authentication tokens to some destination plugins

Action: Upgrade github.com/grafana/grafana to 8.5.14 or later.

go get github.com/grafana/grafana@v9.1.8

go get github.com/grafana/grafana@v8.5.14

Affected

Fixed versions

Sources

• osv: GHSA-jv32-5578-pxjc
• https://github.com/grafana/grafana/security/advisories/GHSA-jv32-5578-pxjc
• https://nvd.nist.gov/vuln/detail/CVE-2022-31130
• https://github.com/grafana/grafana/commit/4dd56e4dabce10007bf4ba1059bf54178c35b177
• https://github.com/grafana/grafana/commit/9da278c044ba605eb5a1886c48df9a2cb0d3885f
• https://github.com/grafana/grafana
• https://github.com/grafana/grafana/releases/tag/v9.1.8

CVE-2022-31130 · published 2024-05-14T22:25:26Z · modified 2026-09-10T03:50:13.980632603Z · JSON

Go/github.com/grafana/grafana CVE-2022-31130: unknown, EPSS 1.33%

Grafana Data source and plugin proxy endpoints leaking authentication tokens to some destination plugins in github.com/grafana/grafana

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2024-2851
• https://github.com/grafana/grafana/security/advisories/GHSA-jv32-5578-pxjc
• https://nvd.nist.gov/vuln/detail/CVE-2022-31130
• https://github.com/grafana/grafana/commit/4dd56e4dabce10007bf4ba1059bf54178c35b177
• https://github.com/grafana/grafana/commit/9da278c044ba605eb5a1886c48df9a2cb0d3885f
• https://github.com/grafana/grafana/releases/tag/v9.1.8

CVE-2022-31130 · published 2024-06-05T15:10:42Z · modified 2026-02-04T03:26:38.369571Z · JSON