CVE-2022-39307

Go/github.com/grafana/grafana CVE-2022-39307: medium 6.7, EPSS 0.76%

Grafana User enumeration via forget password

Action: Upgrade github.com/grafana/grafana to 8.5.15 or later.

go get github.com/grafana/grafana@v9.2.4

go get github.com/grafana/grafana@v8.5.15

Affected

Fixed versions

Sources

• osv: GHSA-3p62-42x7-gxg5
• https://github.com/grafana/grafana/security/advisories/GHSA-3p62-42x7-gxg5
• https://nvd.nist.gov/vuln/detail/CVE-2022-39307
• https://github.com/grafana/grafana
• https://security.netapp.com/advisory/ntap-20221215-0004

CVE-2022-39307 · published 2024-05-14T22:29:31Z · modified 2026-09-10T03:50:13.258421694Z · JSON

Go/github.com/grafana/grafana CVE-2022-39307: unknown, EPSS 0.76%

Grafana User enumeration via forget password in github.com/grafana/grafana

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2024-2844
• https://github.com/grafana/grafana/security/advisories/GHSA-3p62-42x7-gxg5
• https://nvd.nist.gov/vuln/detail/CVE-2022-39307
• https://security.netapp.com/advisory/ntap-20221215-0004

CVE-2022-39307 · published 2024-06-05T15:10:42Z · modified 2026-02-04T03:01:44.923425Z · JSON