{"action":"Upgrade github.com/grafana/grafana to 0.0.0-20250129224826-70073427041e or later.","affected":[{"fixed":"11.4.1","introduced":"11.4.0"},{"fixed":"11.3.3","introduced":"11.3.0"},{"fixed":"11.2.6","introduced":"11.2.0"},{"fixed":"11.1.11","introduced":"11.1.0"},{"fixed":"11.0.11","introduced":"11.0.0"},{"fixed":"10.4.15","introduced":"1.9.2"},{"introduced":"0"},{"fixed":"1.9.2-0.20250129224826-70073427041e","introduced":"0.0.0"}],"component":"github.com/grafana/grafana","cve_ids":["CVE-2024-11741"],"ecosystem":"Go","epss":0.00411,"exploited":false,"fixed_versions":["11.4.1","11.3.3","11.2.6","11.1.11","11.0.11","10.4.15","0.0.0-20250129224826-70073427041e","1.9.2-0.20250129224826-70073427041e"],"ghsa_id":"GHSA-wxcc-2f3q-4h58","id":"tcs_01M5KFRB6GAHYV2SB627FFA137","modified_at":"2026-09-10T03:50:22.270028210Z","published_at":"2025-01-31T18:31:07Z","references":["https://osv.dev/vulnerability/GHSA-wxcc-2f3q-4h58","https://nvd.nist.gov/vuln/detail/CVE-2024-11741","https://github.com/grafana/grafana/commit/70073427041e15c353e0d467b714527584765aea","https://github.com/grafana/grafana","https://grafana.com/security/security-advisories/cve-2024-11741","https://pkg.go.dev/vuln/GO-2025-3438","https://security.netapp.com/advisory/ntap-20250509-0006"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-wxcc-2f3q-4h58","url":"https://osv.dev/vulnerability/GHSA-wxcc-2f3q-4h58"}],"summary":"Grafana Alerting VictorOps integration could be exposed to users with Viewer permission"}