CVE-2022-35957

Go/github.com/grafana/grafana CVE-2022-35957: medium 6.6

Grafana Escalation from admin to server admin when auth proxy is used

Action: Upgrade github.com/grafana/grafana to 8.5.13 or later.

go get github.com/grafana/grafana@v9.1.6

go get github.com/grafana/grafana@v9.0.9

go get github.com/grafana/grafana@v8.5.13

Affected

Fixed versions

Sources

• osv: GHSA-ff5c-938w-8c9q
• https://github.com/grafana/grafana/security/advisories/GHSA-ff5c-938w-8c9q
• https://nvd.nist.gov/vuln/detail/CVE-2022-35957
• https://github.com/grafana/grafana
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WYU5C2RITLHVZSTCWNGQWA6KSPYNXM2H
• https://security.netapp.com/advisory/ntap-20221215-0001

CVE-2022-35957 · published 2024-05-14T22:25:56Z · modified 2026-09-10T03:50:00.263101057Z · JSON

Go/github.com/grafana/grafana CVE-2022-35957: unknown

Grafana Escalation from admin to server admin when auth proxy is used in github.com/grafana/grafana

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2024-2847
• https://github.com/grafana/grafana/security/advisories/GHSA-ff5c-938w-8c9q
• https://nvd.nist.gov/vuln/detail/CVE-2022-35957
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WYU5C2RITLHVZSTCWNGQWA6KSPYNXM2H
• https://security.netapp.com/advisory/ntap-20221215-0001

CVE-2022-35957 · published 2024-06-05T15:10:42Z · modified 2026-02-04T04:16:59.555816Z · JSON