Improper authorization control for web services In grafana
Description
A flaw was found in Grafana. An authenticated user with editor privileges could exploit a Broken Access Control (BAC) vulnerability in the Snapshot API. This flaw allows an editor to delete any dashboard snapshot, even those they do not have explicit read or write access to, leading to unauthorized data integrity loss.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Aliases
1. 2. 3.