tocsin

CVE-2024-11741

2 advisories.

Go/github.com/grafana/grafana CVE-2024-11741: medium 4.3, EPSS 0.41%

Grafana Alerting VictorOps integration could be exposed to users with Viewer permission

Action: Upgrade github.com/grafana/grafana to 0.0.0-20250129224826-70073427041e or later.

go get github.com/grafana/grafana@v11.4.1
go get github.com/grafana/grafana@v11.3.3
go get github.com/grafana/grafana@v11.2.6
go get github.com/grafana/grafana@v11.1.11
go get github.com/grafana/grafana@v11.0.11
go get github.com/grafana/grafana@v10.4.15
go get github.com/grafana/grafana@v0.0.0-20250129224826-70073427041e
go get github.com/grafana/grafana@v1.9.2-0.20250129224826-70073427041e

Affected

introducedfixedlast affected
11.4.011.4.1-
11.3.011.3.3-
11.2.011.2.6-
11.1.011.1.11-
11.0.011.0.11-
1.9.210.4.15-
0--
0.0.01.9.2-0.20250129224826-70073427041e-

Fixed versions

11.4.111.3.311.2.611.1.1111.0.1110.4.150.0.0-20250129224826-70073427041e1.9.2-0.20250129224826-70073427041e

Sources

CVE-2024-11741 · published · modified · JSON

Go/github.com/grafana/grafana CVE-2024-11741: unknown, EPSS 0.41%

Grafana Alerting VictorOps integration could be exposed to users with Viewer permission in github.com/grafana/grafana

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0--

Fixed versions

No fixed version in the source.

Sources

CVE-2024-11741 · published · modified · JSON