logo

Database

Authentication mechanism absence or evasion In github.com/grafana/grafana

Description

access restriction bypass

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Package
Affected version
Patched versions

Aliases

1. CVE-2021-412442. NVD-2021-412443. OSV-2021-412444. GHSA-mpwp-42x6-4wmx5. GCVE-2021-41244

References

1. https://github.com/grafana/grafana/security/advisories/GHSA-mpwp-42x6-4wmx2. https://grafana.com/blog/2021/11/15/grafana-8.2.4-released-with-security-fixes3. https://security.netapp.com/advisory/ntap-20211223-00014. http://www.openwall.com/lists/oss-security/2021/11/15/1

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.