CVE-2024-1442
A user with the permissions to create a data source can use Grafana API to create a data source with UID set to *. Doing this will grant the user access to read, query, edit and delete all data sources within the organization.
| Software | From | Fixed in |
|---|---|---|
github.com/grafana/grafana
|
8.5.0 | 9.5.7 |
|
github.com/grafana/grafana
|
10.0.0 | 10.0.12 |
|
github.com/grafana/grafana
|
10.1.0 | 10.1.8 |
|
github.com/grafana/grafana
|
10.2.0 | 10.2.5 |
|
github.com/grafana/grafana
|
10.3.0 | 10.3.4 |
| grafana / grafana | 10.0.0 | 10.0.12 |
| grafana / grafana | 10.1.0 | 10.1.8 |
| grafana / grafana | 10.2.0 | 10.2.5 |
| grafana / grafana | 10.3.0 | 10.3.4 |
| grafana / grafana | 8.5.0 | 9.5.7 |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime