CVE-2022-39324
2 advisories.
Go/github.com/grafana/grafana CVE-2022-39324: medium 6.7
Grafana Spoofing originalUrl of snapshots
Action: Upgrade github.com/grafana/grafana to 8.5.16 or later.
go get github.com/grafana/grafana@v9.2.8go get github.com/grafana/grafana@v8.5.16Affected
| introduced | fixed | last affected |
|---|---|---|
| 9.0.0 | 9.2.8 | - |
| 0 | 8.5.16 | - |
Fixed versions
| 9.2.8 | 8.5.16 |
Sources
- osv: GHSA-4724-7jwc-3fpw
- https://github.com/grafana/grafana/security/advisories/GHSA-4724-7jwc-3fpw
- https://nvd.nist.gov/vuln/detail/CVE-2022-39324
- https://github.com/grafana/grafana/pull/60232
- https://github.com/grafana/grafana/pull/60256
- https://github.com/grafana/grafana/commit/239888f22983010576bb3a9135a7294e88c0c74a
- https://github.com/grafana/grafana/commit/d7dcea71ea763780dc286792a0afd560bff2985c
- https://github.com/grafana/grafana
CVE-2022-39324 · published · modified · JSON
Go/github.com/grafana/grafana CVE-2022-39324: unknown
Grafana Spoofing originalUrl of snapshots in github.com/grafana/grafana
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GO-2024-2867
- https://github.com/grafana/grafana/security/advisories/GHSA-4724-7jwc-3fpw
- https://nvd.nist.gov/vuln/detail/CVE-2022-39324
- https://github.com/grafana/grafana/commit/239888f22983010576bb3a9135a7294e88c0c74a
- https://github.com/grafana/grafana/commit/d7dcea71ea763780dc286792a0afd560bff2985c
- https://github.com/grafana/grafana/pull/60232
- https://github.com/grafana/grafana/pull/60256
CVE-2022-39324 · published · modified · JSON