Description

A flaw was found in Grafana. A malicious or compromised Git server configured for Git Sync provisioning can return oversized or highly compressed responses, causing uncontrolled memory consumption. This issue can exhaust system memory, resulting in a Denial of Service (DoS) condition on the Grafana instance. Exploitation requires an administrator to have configured Git Sync to communicate with the untrusted server.

Mitigation

Aliases