CVE-2023-3128
1 advisory.
Go/github.com/grafana/grafana CVE-2023-3128: critical 9.4, EPSS 4.00%
Grafana vulnerable to Authentication Bypass by Spoofing
Action: Upgrade github.com/grafana/grafana to 8.5.27 or later.
go get github.com/grafana/grafana@v9.4.13go get github.com/grafana/grafana@v9.3.16go get github.com/grafana/grafana@v9.2.20go get github.com/grafana/grafana@v8.5.27Affected
| introduced | fixed | last affected |
|---|---|---|
| 9.4.0 | 9.4.13 | - |
| 9.3.0 | 9.3.16 | - |
| 9.0.0 | 9.2.20 | - |
| 0 | 8.5.27 | - |
Fixed versions
| 9.4.13 | 9.3.16 | 9.2.20 | 8.5.27 |
Sources
- osv: GHSA-mpv3-g8m3-3fjc
- https://github.com/grafana/bugbounty/security/advisories/GHSA-gxh2-6vvc-rrgp
- https://nvd.nist.gov/vuln/detail/CVE-2023-3128
- https://github.com/grafana/grafana
- https://github.com/grafana/grafana/blob/69fc4e6bc0be2a82085ab3885c2262a4d49e97d8/CHANGELOG.md
- https://grafana.com/security/security-advisories/cve-2023-3128
- https://security.netapp.com/advisory/ntap-20230714-0004
CVE-2023-3128 · published · modified · JSON