The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Grafana is an open-source platform for monitoring and observability.
Using public dashboards users can query multiple distinct data sources using mixed queries. However such query has a possibility of crashing a Grafana instance.
The only feature that uses mixed queries at the moment is public dashboards, but it's also possible to cause this by calling the query API directly.
This might enable malicious users to crash Grafana instances through that endpoint.
Users may upgrade to version 9.4.12 and 9.5.3 to receive a fix.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade ceph-debugsourceUpgrade ceph-osd-debuginfoUpgrade python3-cephfs-debuginfoUpgrade ceph-mon-debuginfoUpgrade libradospp-develUpgrade ceph-test-debuginfoUpgrade cephfs-topUpgrade python3-rbd-debuginfoUpgrade ceph-common-debuginfoUpgrade ceph-mds-debuginfoUpgrade ceph-mgr-debuginfoUpgrade python3-rgw-debuginfoUpgrade rbd-mirror-debuginfoUpgrade ceph-baseUpgrade python3-rgwUpgrade ceph-mibUpgrade ceph-exporter-debuginfoUpgrade libradosstriper1Upgrade ceph-radosgw-debuginfoUpgrade cephadm-ansibleUpgrade rbd-nbd-debuginfoUpgrade ceph-selinuxUpgrade ceph-resource-agentsUpgrade cephfs-mirror-debuginfoUpgrade ceph-base-debuginfoUpgrade libradosstriper1-debuginfoUpgrade cephadmUpgrade python3-rbdUpgrade ceph-commonUpgrade librgw2-debuginfoUpgrade ceph-fuse-debuginfoUpgrade librados-devel-debuginfoUpgrade ceph-immutable-object-cache-debuginfoUpgrade libcephfs-develUpgrade ceph-immutable-object-cacheUpgrade rbd-fuse-debuginfoUpgrade python3-cephfsUpgrade librgw2Upgrade librbd-develUpgrade ceph-fuseUpgrade rbd-nbdUpgrade libcephfs2Upgrade python3-ceph-commonUpgrade ceph-debuginfoUpgrade python3-rados-debuginfoUpgrade librgw-develUpgrade python3-ceph-argparseUpgrade libcephsqlite-debuginfoUpgrade libcephfs2-debuginfoUpgrade python3-radosUpgrade librados-devel | Dec 13, 2023 | Jun 6, 2023 |
| Freebsd | — | Upgrade grafana9Upgrade grafana | Jun 8, 2023 | Jun 7, 2023 |
| Redhat_linux | — | Upgrade ceph-immutable-object-cacheUpgrade librados-devel-debuginfoUpgrade python3-rgw-debuginfoUpgrade libcephfs-develUpgrade ceph-resource-agentsUpgrade libcephsqlite-debuginfoUpgrade libradospp-develUpgrade ceph-fuse-debuginfoUpgrade ceph-baseUpgrade ceph-debuginfoUpgrade cephfs-topUpgrade ceph-selinuxNo solution existsUpgrade libradosstriper1-debuginfoUpgrade ceph-common-debuginfoUpgrade ceph-osd-debuginfoUpgrade python3-rbd-debuginfoUpgrade ceph-mds-debuginfoUpgrade libradosstriper1Upgrade cephfs-mirror-debuginfoUpgrade ceph-commonUpgrade librbd-develUpgrade ceph-fuseUpgrade python3-rbdUpgrade cephadmUpgrade python3-rados-debuginfoUpgrade ceph-mibUpgrade rbd-nbdUpgrade librgw2-debuginfoUpgrade ceph-radosgw-debuginfoUpgrade cephadm-ansibleUpgrade libcephfs2Upgrade rbd-fuse-debuginfoUpgrade python3-ceph-argparseUpgrade librgw-develUpgrade librados-develUpgrade rbd-nbd-debuginfoUpgrade ceph-mgr-debuginfoUpgrade rbd-mirror-debuginfoUpgrade python3-radosUpgrade python3-cephfs-debuginfoUpgrade ceph-immutable-object-cache-debuginfoUpgrade python3-ceph-commonUpgrade ceph-test-debuginfoUpgrade ceph-exporter-debuginfoUpgrade ceph-base-debuginfoUpgrade librgw2Upgrade python3-cephfsUpgrade ceph-mon-debuginfoUpgrade ceph-debugsourceUpgrade libcephfs2-debuginfoUpgrade python3-rgw | Dec 13, 2023 | Jun 6, 2023 |
| Suse | — | Upgrade grafana | Jul 21, 2023 | Jun 6, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub