CVE-2023-6152
1 advisory.
Go/github.com/grafana/grafana CVE-2023-6152: medium 5.4
Email Validation Bypass And Preventing Sign Up From Email's Owner
Action: Upgrade github.com/grafana/grafana to 9.5.16 or later.
go get github.com/grafana/grafana@v9.5.16go get github.com/grafana/grafana@v10.0.11go get github.com/grafana/grafana@v10.1.7go get github.com/grafana/grafana@v10.2.4go get github.com/grafana/grafana@v10.3.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.5.0 | 9.5.16 | - |
| 10.0.0 | 10.0.11 | - |
| 10.1.0 | 10.1.7 | - |
| 10.2.0 | 10.2.4 | - |
| 10.3.0 | 10.3.3 | - |
Fixed versions
| 9.5.16 | 10.0.11 | 10.1.7 | 10.2.4 | 10.3.3 |
Sources
- osv: GHSA-3hv4-r2fm-h27f
- https://github.com/grafana/bugbounty/security/advisories/GHSA-3hv4-r2fm-h27f
- https://nvd.nist.gov/vuln/detail/CVE-2023-6152
- https://github.com/grafana/grafana
- https://grafana.com/security/security-advisories/cve-2023-6152
- https://security.netapp.com/advisory/ntap-20250214-0008
CVE-2023-6152 · published · modified · JSON