grafana vulnerabilities

Known vulnerabilities in the grafana package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
M Information Exposure	*
M Allocation of Resources Without Limits or Throttling	*
M Cross-site Scripting (XSS)	*
M Information Exposure	*
H Cross-site Scripting (XSS)	<0:10.2.6-17.el10_0
H Asymmetric Resource Consumption (Amplification)	<0:10.2.6-15.el10_0
H Resource Exhaustion	*
H Resource Exhaustion	*
H Resource Exhaustion	*
H Improper Validation of Syntactic Correctness of Input	*
M Resource Exhaustion	*
M Directory Traversal	*
M Directory Traversal	*
H Resource Exhaustion	*
H Resource Exhaustion	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Buffer Overflow	*
M Buffer Overflow	*
M Buffer Overflow	*
M Integer Overflow or Wraparound	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Resource Exhaustion	*
M Resource Exhaustion	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Improper Input Validation	*
M Improper Input Validation	*
M Improper Input Validation	*
L Improper Input Validation	*
L Improper Validation of Array Index	*
L Improper Validation of Array Index	*
M Inefficient Regular Expression Complexity	*
M Inefficient Regular Expression Complexity	*
M Arbitrary Code Injection	*
M Improper Input Validation	*
M Improper Input Validation	*
M Resource Exhaustion	*
M Out-of-bounds Read	*
M Improper Certificate Validation	*
L Race Condition	*
L Race Condition	*
L Directory Traversal	*
L Directory Traversal	*
L Directory Traversal	*
L Directory Traversal	*
M Incorrect Permission Assignment for Critical Resource	*
M Resource Exhaustion	*
L Resource Exhaustion	*
L Directory Traversal	*
L Directory Traversal	*
L Directory Traversal	*
M Resource Exhaustion	*
M Resource Exhaustion	*
M Resource Exhaustion	*
L Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Resource Exhaustion	*
M Resource Exhaustion	*
L Loop with Unreachable Exit Condition ('Infinite Loop')	*
L Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Integer Overflow or Wraparound	*
M Integer Overflow or Wraparound	*
M Improper Input Validation	*
M Improper Input Validation	*
M Improper Input Validation	*
M Improper Input Validation	*
M Improper Input Validation	*
M Improper Input Validation	*
M Race Condition	*
M Race Condition	*
M Race Condition	*
M Improper Input Validation	*
M Improper Input Validation	*
M Improper Input Validation	*
M Resource Exhaustion	*
M Resource Exhaustion	*
M Resource Exhaustion	*
M Information Exposure	*
M Information Exposure	*
M Information Exposure	*
M Resource Exhaustion	*
M Resource Exhaustion	*
M Resource Exhaustion	*
M Resource Exhaustion	*
L Cross-site Scripting (XSS)	*
L Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Incorrect Permission Assignment for Critical Resource	*
M Incorrect Permission Assignment for Critical Resource	*
M Incorrect Permission Assignment for Critical Resource	*
L Information Exposure	*
L Information Exposure	*
M Information Exposure	*
L Open Redirect	*
L Open Redirect	*
M Open Redirect	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
H Resource Exhaustion	*
L Resource Exhaustion	*
L Resource Exhaustion	*
M Resource Exhaustion	*
L Arbitrary Code Injection	*
L Arbitrary Code Injection	*
M Improper Privilege Management	*
M Open Redirect	*
M Open Redirect	*
M Inefficient Regular Expression Complexity	*
M Inefficient Regular Expression Complexity	*
M Inefficient Regular Expression Complexity	*
M Inefficient Regular Expression Complexity	*
M Inefficient Regular Expression Complexity	*
M Inefficient Regular Expression Complexity	*
M Inefficient Regular Expression Complexity	*
M Insufficient Granularity of Access Control	*
M Insufficient Granularity of Access Control	*
M Out-of-bounds Read	*
M Out-of-bounds Read	*
M Out-of-bounds Read	*
M Out-of-Bounds	*
M Improper Input Validation	*
M Improper Input Validation	*
M Out-of-Bounds	*
M Resource Exhaustion	*
M Resource Exhaustion	*
M Resource Exhaustion	*
M Authorization Bypass Through User-Controlled Key	*
M Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Incorrect Authorization	*
M Incorrect Authorization	*
L Resource Exhaustion	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
H Improper Authentication	*
L Information Exposure	*
L Loop with Unreachable Exit Condition ('Infinite Loop')	*
L Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Information Exposure	*
M Information Exposure	*
M Information Exposure	*
M Information Exposure	*
M Information Exposure	*
M Information Exposure	*
M Improper Authentication	*
M Improper Authentication	*
M Improper Authentication	*
L Cross-site Scripting (XSS)	*
L Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Improper Input Validation	*
M Improper Input Validation	*
M Improper Input Validation	*
M Improper Input Validation	*
L Resource Exhaustion	*
L Resource Exhaustion	*
M Resource Exhaustion	*
M Resource Exhaustion	*
M Improper Input Validation	*
M Cross-site Scripting (XSS)	*
M Improper Input Validation	*
M Buffer Overflow	*
M Buffer Overflow	*
M Buffer Overflow	*
M Resource Exhaustion	*
M Resource Exhaustion	*
M Authorization Bypass Through User-Controlled Key	*
H Authorization Bypass Through User-Controlled Key	*
H Authorization Bypass Through User-Controlled Key	*
M Information Exposure	*
M Information Exposure	*
M Information Exposure	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
H NULL Pointer Dereference	*
H Cross-site Scripting (XSS)	*
H Cross-site Scripting (XSS)	*
M Arbitrary Code Injection	*
M Arbitrary Code Injection	*
M Missing Synchronization	*
M Missing Synchronization	*
M Improper Access Control	*
M Improper Access Control	*
M Incorrect Calculation	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Incorrect Calculation	*
M Information Exposure	*
M Information Exposure	*
M Incorrect Calculation	*
M Cross-site Scripting (XSS)	*
M Authentication Bypass	*
M Authentication Bypass	*
L Authorization Bypass Through User-Controlled Key	*

Vulnerability

Vulnerable Version

Information Exposure