Grafana <= 6.4.3 has an Arbitrary File Read vulnerability, which could be exploited by an authenticated attacker that has privileges to modify the data source configurations.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade grafanaUpgrade grafana-azure-monitorUpgrade grafana-elasticsearchUpgrade grafana-mysqlUpgrade grafana-cloudwatchUpgrade grafana-stackdriverUpgrade grafana-mssqlUpgrade grafana-opentsdbUpgrade grafana-lokiUpgrade grafana-prometheusUpgrade grafana-postgresUpgrade grafana-graphiteUpgrade grafana-influxdb | May 4, 2022 | Aug 28, 2020 |
| Centos_linux | — | Upgrade grafana-debuginfoUpgrade grafanaUpgrade grafana-graphiteUpgrade grafana-azure-monitorUpgrade grafana-opentsdbUpgrade grafana-lokiUpgrade grafana-prometheusUpgrade grafana-cloudwatchUpgrade grafana-mysqlUpgrade grafana-elasticsearchUpgrade grafana-influxdbUpgrade grafana-mssqlUpgrade grafana-stackdriverUpgrade grafana-postgres | Nov 5, 2020 | Aug 28, 2020 |
| Oracle_linux | — | Upgrade grafana-influxdbUpgrade grafanaUpgrade grafana-stackdriverUpgrade grafana-lokiUpgrade grafana-mysqlUpgrade grafana-postgresUpgrade grafana-azure-monitorUpgrade grafana-opentsdbUpgrade grafana-elasticsearchUpgrade grafana-cloudwatchUpgrade grafana-prometheusUpgrade grafana-graphiteUpgrade grafana-mssql | Nov 12, 2020 | Aug 27, 2020 |
| Redhat_linux | — | Upgrade grafana-postgresUpgrade grafana-graphiteUpgrade grafana-opentsdbUpgrade grafana-mysqlUpgrade grafana-lokiUpgrade grafana-influxdbUpgrade grafanaUpgrade grafana-debuginfoUpgrade grafana-prometheusUpgrade grafana-stackdriverUpgrade grafana-azure-monitorUpgrade grafana-elasticsearchUpgrade grafana-cloudwatchUpgrade grafana-mssql | Nov 5, 2020 | Aug 28, 2020 |
| Suse | — | Upgrade system-user-grafana | Jun 9, 2021 | Aug 28, 2020 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Aug 28, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub