Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2019-15043
5
MEDIUMCVSS v2
Published
September 3, 2019
Affected
4 projects
Assigned by
MITRE
Severity scale
010
Description
In Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This makes it possible to run a denial of service attack against the server running Grafana.
grafana/grafana
GitHubThe open and composable observability and data visualization platform. Visualize metrics, logs, and traces from multiple sources like Prometheus, Loki, Elasticsearch, InfluxDB, Postgres and many more.
GitHubThe open and composable observability and data visualization platform. Visualize metrics, logs, and traces from multiple sources like Prometheus, Loki, Elasticsearch, InfluxDB, Postgres and many more. >= 2.0.0, < 5.4.5, >= 6.0.0, < 6.3.4NVD
grafana/grafana
Docker HubThe official Grafana docker container
Docker HubThe official Grafana docker container>= 2.0.0, < 5.4.5, >= 6.0.0, < 6.3.4NVD
RubyGems
NPM