CVE-2024-1442

Publication date

2024-03-07 17:45:43

Family

GRAFANA

State

PUBLISHED

Description

A user with the permissions to create a data source can use Grafana API to create a data source with UID set to *. Doing this will grant the user access to read, query, edit and delete all data sources within the organization.