Grafana <= 6.4.3 has an Arbitrary File Read vulnerability, which could be exploited by an authenticated attacker that has privileges to modify the data source configurations.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade grafana-postgresUpgrade grafana-influxdbUpgrade grafana-prometheusUpgrade grafana-opentsdbUpgrade grafana-graphiteUpgrade grafana-lokiUpgrade grafana-azure-monitorUpgrade grafanaUpgrade grafana-mysqlUpgrade grafana-elasticsearchUpgrade grafana-mssqlUpgrade grafana-stackdriverUpgrade grafana-cloudwatch | May 4, 2022 | Aug 28, 2020 |
| Centos_linux | — | Upgrade grafana-opentsdbUpgrade grafana-lokiUpgrade grafana-graphiteUpgrade grafana-mysqlUpgrade grafana-prometheusUpgrade grafana-cloudwatchUpgrade grafana-influxdbUpgrade grafana-debuginfoUpgrade grafana-mssqlUpgrade grafanaUpgrade grafana-elasticsearchUpgrade grafana-azure-monitorUpgrade grafana-stackdriverUpgrade grafana-postgres | Nov 5, 2020 | Aug 28, 2020 |
| Oracle_linux | — | Upgrade grafana-stackdriverUpgrade grafana-postgresUpgrade grafana-lokiUpgrade grafanaUpgrade grafana-mysqlUpgrade grafana-influxdbUpgrade grafana-azure-monitorUpgrade grafana-graphiteUpgrade grafana-prometheusUpgrade grafana-cloudwatchUpgrade grafana-mssqlUpgrade grafana-elasticsearchUpgrade grafana-opentsdb | Nov 12, 2020 | Aug 27, 2020 |
| Redhat_linux | — | Upgrade grafana-mssqlUpgrade grafana-azure-monitorUpgrade grafana-elasticsearchUpgrade grafana-cloudwatchUpgrade grafana-stackdriverUpgrade grafana-influxdbUpgrade grafana-prometheusUpgrade grafana-mysqlUpgrade grafana-graphiteUpgrade grafana-postgresUpgrade grafana-lokiUpgrade grafana-opentsdbUpgrade grafanaUpgrade grafana-debuginfo | Nov 5, 2020 | Aug 28, 2020 |
| Suse | — | Upgrade system-user-grafana | Jun 9, 2021 | Aug 28, 2020 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Aug 28, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub