Improper authorization control for web services In grafana
Description
A flaw was found in Grafana. An authenticated user with Editor permissions can set file-provisioning metadata when creating a dashboard through the dashboard API due to a missing authorization check. Consequently, the dashboard is treated as externally managed by configuration files, preventing administrators from modifying or deleting it through the Grafana web interface. The impact is restricted to the editor's organization and does not expose sensitive data.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component |
|---|---|
 rpm rhel10 |
Aliases
1. 2. 3.