CVE-2019-15043

Published
View on NVD ↗
CVSS v3
N/A
CVSS v2
5
MEDIUM
Affected
1
PROJECT

Description

In Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This makes it possible to run a denial of service attack against the server running Grafana.

The open and composable observability and data visualization platform. Visualize metrics, logs, and traces from multiple sources like Prometheus, Loki, Elasticsearch, InfluxDB, Postgres and many more.
GitHubGitHub
74.7K