CVE-2024-6322

Go/github.com/grafana/grafana CVE-2024-6322: medium 4.4

Grafana plugin data sources vulnerable to access control bypass

Action: Upgrade github.com/grafana/grafana to 0.0.0-20240725142242-c326d865c58b or later.

go get github.com/grafana/grafana@v11.1.1

go get github.com/grafana/grafana@v11.1.3

go get github.com/grafana/grafana@v0.0.0-20240725142242-c326d865c58b

go get github.com/grafana/grafana@v1.9.2-0.20240725142242-c326d865c58b

Affected

Fixed versions

Sources

• osv: GHSA-hh8p-374f-qgr5
• https://nvd.nist.gov/vuln/detail/CVE-2024-6322
• https://github.com/grafana/grafana/commit/4cb3ba5d1a7ab8b9676034e89dada2fcde1766ef
• https://github.com/grafana/grafana/commit/9cdba084a9100c6b11d32eef9d2bd53656c6964a
• https://github.com/grafana/grafana
• https://grafana.com/security/security-advisories/cve-2024-6322

CVE-2024-6322 · published 2024-08-20T18:31:26Z · modified 2026-09-10T03:50:18.159775297Z · JSON

Go/github.com/grafana/grafana CVE-2024-6322: unknown

Grafana plugin data sources vulnerable to access control bypass in github.com/grafana/grafana

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2024-3079
• https://github.com/advisories/GHSA-hh8p-374f-qgr5
• https://nvd.nist.gov/vuln/detail/CVE-2024-6322
• https://github.com/grafana/grafana/commit/4cb3ba5d1a7ab8b9676034e89dada2fcde1766ef
• https://github.com/grafana/grafana/commit/9cdba084a9100c6b11d32eef9d2bd53656c6964a
• https://grafana.com/security/security-advisories/cve-2024-6322

CVE-2024-6322 · published 2024-08-22T20:03:04Z · modified 2026-02-04T04:33:32.558145Z · JSON