Vulnerability Report: GO-2024-2661
- CVE-2019-19499, GHSA-4pwp-cx67-5cpx
- Affects: github.com/grafana/grafana
- Published: Mar 28, 2024
An authenticated attacker that has privileges to modify the data source configurations can read arbitrary files.
Affected Packages
-
PathVersionsSymbols
Aliases
References
- https://github.com/grafana/grafana/pull/20192
- https://github.com/grafana/grafana/blob/master/CHANGELOG.md#644-2019-11-06
- https://security.netapp.com/advisory/ntap-20200918-0003
- https://swarm.ptsecurity.com/grafana-6-4-3-arbitrary-file-read
- https://vuln.go.dev/ID/GO-2024-2661.json
Feedback
See anything missing or incorrect?
Suggest an edit to this report.