A user with the permissions to create a data source can use Grafana API to create a data source with UID set to *.
Doing this will grant the user access to read, query, edit and delete all data sources within the organization.
References
Configurations
No configuration.
History
08 Mar 2024, 14:02
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
07 Mar 2024, 18:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-03-07 18:15
Updated : 2024-03-08 14:02
NVD link : CVE-2024-1442
Mitre link : CVE-2024-1442
CVE.ORG link : CVE-2024-1442
JSON object : View
Products Affected
No product.
CWE
CWE-269
Improper Privilege Management