grafana-selinux vulnerabilities

Known vulnerabilities in the grafana-selinux package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
M Improper Access Control	*
H Cross-site Scripting (XSS)	<0:10.2.6-13.el9_6
H Directory Traversal	*
H Cross-site Scripting (XSS)	<0:10.2.6-13.el9_6
M Inefficient Regular Expression Complexity	*
M Incomplete Filtering of Special Elements	*
M Inefficient Regular Expression Complexity	*
M Inefficient Regular Expression Complexity	*
M Inefficient Regular Expression Complexity	*
M Cross-site Scripting (XSS)	*
M HTTP Request Smuggling	*
H Asymmetric Resource Consumption (Amplification)	<0:9.2.10-22.el9_4
H Asymmetric Resource Consumption (Amplification)	<0:9.2.10-22.el9_4
H Asymmetric Resource Consumption (Amplification)	<0:9.2.10-22.el9_4
H Asymmetric Resource Consumption (Amplification)	<0:10.2.6-9.el9_5
H Asymmetric Resource Consumption (Amplification)	<0:10.2.6-11.el9_6
M Improper Input Validation	*
M Cross-site Scripting (XSS)	*
H Resource Exhaustion	<0:9.2.10-21.el9_4
H Arbitrary Argument Injection	<0:9.2.10-21.el9_4
H Use of Uninitialized Variable	<0:9.2.10-19.el9_4
H Cross-site Scripting (XSS)	<0:9.2.10-19.el9_4
H Use of Uninitialized Variable	<0:9.2.10-19.el9_4
H Cross-site Scripting (XSS)	<0:9.2.10-19.el9_4
H Resource Exhaustion	<0:9.2.10-21.el9_4
H Arbitrary Argument Injection	<0:9.2.10-21.el9_4
M Information Exposure Through Log Files	<0:10.2.6-4.el9
M Improper Input Validation	<0:10.2.6-4.el9
M Misinterpretation of Input	<0:10.2.6-4.el9
M Improper Input Validation	<0:10.2.6-4.el9
M Loop with Unreachable Exit Condition ('Infinite Loop')	<0:10.2.6-4.el9
H Use of Uninitialized Variable	<0:9.2.10-19.el9_4
M Server-Side Request Forgery (SSRF)	*
M Arbitrary Code Injection	*
H Uncontrolled Recursion	<0:9.2.10-17.el9_4
H Cross-site Scripting (XSS)	<0:10.2.6-7.el9_5
H Uncontrolled Recursion	<0:9.2.10-17.el9_4
H Uncontrolled Recursion	<0:10.2.6-7.el9_5
M Memory Leak	<0:9.2.10-16.el9_4
M Authorization Bypass Through User-Controlled Key	<0:9.2.10-16.el9_4
M Memory Leak	<0:9.2.10-16.el9_4
M Authorization Bypass Through User-Controlled Key	<0:9.2.10-16.el9_4
M Memory Leak	<0:9.2.10-16.el9_4
M Authorization Bypass Through User-Controlled Key	<0:9.2.10-16.el9_4
M Cross-site Scripting (XSS)	*
M Information Exposure	*
L Information Exposure	*
L Improper Verification of Cryptographic Signature	*
M Information Exposure	*
H Resource Exhaustion	<0:9.2.10-21.el9_4
H Arbitrary Argument Injection	<0:9.2.10-21.el9_4
H Resource Exhaustion	*
H Arbitrary Argument Injection	*
M CRLF Injection	*
L Improper Handling of Exceptional Conditions	*
L Authorization Bypass Through User-Controlled Key	*
H Use of Uninitialized Variable	<0:9.2.10-19.el9_4
H Cross-site Scripting (XSS)	<0:9.2.10-19.el9_4
H Cross-site Scripting (XSS)	<0:10.2.6-7.el9_5
M Use of Uninitialized Variable	*
H Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	*
H Use of Uninitialized Variable	<0:9.2.10-19.el9_4
M Insufficient Compartmentalization	*
H Uncontrolled Recursion	<0:9.2.10-17.el9_4
M Insufficiently Protected Credentials	*
M Inefficient Regular Expression Complexity	*
M Improperly Controlled Sequential Memory Allocation	*
H Uncontrolled Recursion	<0:10.2.6-7.el9_5
M Uncontrolled Recursion	*
M Memory Leak	<0:9.2.10-16.el9_4
M Authorization Bypass Through User-Controlled Key	<0:9.2.10-16.el9_4
M Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	*
M Improper Input Validation	<0:10.2.6-4.el9
M Information Exposure Through Log Files	<0:10.2.6-4.el9
M Improper Input Validation	<0:10.2.6-4.el9
M Misinterpretation of Input	<0:10.2.6-4.el9
M Resource Exhaustion	*
M Authentication Bypass	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Resource Exhaustion	*
L Resource Exhaustion	*
M Resource Exhaustion	*
M Arbitrary Code Injection	*
M Arbitrary Code Injection	*
M Improper Input Validation	*
M Misinterpretation of Input	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	<0:10.2.6-4.el9
M Information Exposure	*
M Information Exposure	*
M CVE-2023-39321	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Allocation of Resources Without Limits or Throttling	*
M Resource Exhaustion	*
L Insufficient Entropy	*
M Improper Input Validation	*
M Memory Leak	<0:9.2.10-16.el9_4
M Authorization Bypass Through User-Controlled Key	<0:9.2.10-16.el9_4

Vulnerability

Vulnerable Version

Improper Access Control