Grafana <= 6.4.3 has an Arbitrary File Read vulnerability, which could be exploited by an authenticated attacker that has privileges to modify the data source configurations.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade grafana-azure-monitorUpgrade grafanaUpgrade grafana-elasticsearchUpgrade grafana-mysqlUpgrade grafana-cloudwatchUpgrade grafana-mssqlUpgrade grafana-stackdriverUpgrade grafana-lokiUpgrade grafana-postgresUpgrade grafana-graphiteUpgrade grafana-opentsdbUpgrade grafana-influxdbUpgrade grafana-prometheus | May 4, 2022 | Aug 28, 2020 |
| Centos_linux | — | Upgrade grafana-lokiUpgrade grafana-mysqlUpgrade grafana-prometheusUpgrade grafana-opentsdbUpgrade grafana-elasticsearchUpgrade grafana-influxdbUpgrade grafana-graphiteUpgrade grafana-cloudwatchUpgrade grafana-azure-monitorUpgrade grafana-debuginfoUpgrade grafanaUpgrade grafana-mssqlUpgrade grafana-stackdriverUpgrade grafana-postgres | Nov 5, 2020 | Aug 28, 2020 |
| Oracle_linux | — | Upgrade grafana-influxdbUpgrade grafana-mysqlUpgrade grafanaUpgrade grafana-postgresUpgrade grafana-stackdriverUpgrade grafana-lokiUpgrade grafana-graphiteUpgrade grafana-opentsdbUpgrade grafana-azure-monitorUpgrade grafana-mssqlUpgrade grafana-cloudwatchUpgrade grafana-elasticsearchUpgrade grafana-prometheus | Nov 12, 2020 | Aug 27, 2020 |
| Redhat_linux | — | Upgrade grafana-cloudwatchUpgrade grafana-stackdriverUpgrade grafana-elasticsearchUpgrade grafana-azure-monitorUpgrade grafana-mssqlUpgrade grafana-postgresUpgrade grafana-opentsdbUpgrade grafana-debuginfoUpgrade grafana-graphiteUpgrade grafana-prometheusUpgrade grafana-influxdbUpgrade grafanaUpgrade grafana-mysqlUpgrade grafana-loki | Nov 5, 2020 | Aug 28, 2020 |
| Suse | — | Upgrade system-user-grafana | Jun 9, 2021 | Aug 28, 2020 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Aug 28, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub