Grafana before 4.6.5 and 5.x before 5.3.3 allows remote authenticated users to read arbitrary files by leveraging Editor or Admin permissions.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Dec 13, 2018 |
| Centos_linux | — | Upgrade librgw2-develUpgrade python-cephfsUpgrade librbd-develUpgrade librgw-develUpgrade ceph-commonUpgrade ceph-fuseUpgrade libcephfs-develUpgrade ceph-radosgwUpgrade libcephfs1Upgrade libcephfs1-develUpgrade rbd-mirrorUpgrade librados-develUpgrade ceph-mdsUpgrade ceph-debuginfoUpgrade python-rgwUpgrade ceph-selinuxUpgrade ceph-baseUpgrade librgw2Upgrade ceph-ansibleUpgrade grafanaUpgrade libcephfs2Upgrade libradosstriper1 | Aug 28, 2019 | Dec 13, 2018 |
| Redhat_linux | — | Upgrade librgw2-develUpgrade ceph-commonUpgrade ceph-baseUpgrade librgw-develUpgrade libcephfs-develUpgrade libcephfs2Upgrade libcephfs1-develUpgrade libcephfs1Upgrade grafanaUpgrade librados-develUpgrade librbd-develUpgrade ceph-selinuxUpgrade python-cephfsUpgrade python-rgwUpgrade ceph-radosgwUpgrade ceph-mdsUpgrade ceph-fuseUpgrade ceph-ansibleUpgrade rbd-mirrorUpgrade ceph-debuginfoUpgrade librgw2Upgrade libradosstriper1 | Apr 15, 2019 | Dec 13, 2018 |
| Suse | — | Upgrade grafana | Feb 4, 2022 | Dec 13, 2018 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Dec 13, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub