CVE-2023-2183
1 advisory.
Go/github.com/grafana/grafana CVE-2023-2183: medium 4.1, EPSS 1.03%
Grafana has Broken Access Control in Alert manager: Viewer can send test alerts
Action: Upgrade github.com/grafana/grafana to 8.5.26 or later.
go get github.com/grafana/grafana@v8.5.26go get github.com/grafana/grafana@v9.2.19go get github.com/grafana/grafana@v9.3.15go get github.com/grafana/grafana@v9.4.12go get github.com/grafana/grafana@v9.5.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 8.5.26 | - |
| 9.0.0 | 9.2.19 | - |
| 9.3.0 | 9.3.15 | - |
| 9.4.0 | 9.4.12 | - |
| 9.5.0 | 9.5.3 | - |
Fixed versions
| 8.5.26 | 9.2.19 | 9.3.15 | 9.4.12 | 9.5.3 |
Sources
- osv: GHSA-cvm3-pp2j-chr3
- https://github.com/grafana/bugbounty/security/advisories/GHSA-cvm3-pp2j-chr3
- https://nvd.nist.gov/vuln/detail/CVE-2023-2183
- https://github.com/grafana/bugbounty
- https://grafana.com/security/security-advisories/cve-2023-2183
CVE-2023-2183 · published · modified · JSON