{"action":"Upgrade grafana to 7.4.5-r0 or later.","affected":[{"fixed":"7.4.5-r0","introduced":"6.0.0"}],"component":"grafana","cve_ids":[],"ecosystem":"Alpine","ecosystem_qualifier":"Alpine:v3.23","exploited":false,"fixed_versions":["7.4.5-r0"],"id":"tcs_01M6GNQJWJM34051PS0H75WXA8","modified_at":"2026-11-03T06:32:27.788827758Z","published_at":"2021-03-22T15:15:14.537Z","references":["https://osv.dev/vulnerability/ALPINE-CVE-2021-28147","https://security.alpinelinux.org/vuln/CVE-2021-28147"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"ALPINE-CVE-2021-28147#Alpine:v3.23/grafana","url":"https://osv.dev/vulnerability/ALPINE-CVE-2021-28147"}],"summary":"The team sync HTTP API in Grafana Enterprise 6.x before 6.7.6, 7.x before 7.3.10, and 7.4.x before 7.4.5 has an Incorrect Access Control issue. On Grafana instances using an external authentication se"}