Known vulnerabilities in Grafana 2.6.0-beta1

Software: Grafana
Version: 2.6.0-beta1
Software CPE: cpe:2.3:a:grafana_labs:grafana:*:*:*:*:*:*:*:*
Total vulnerabilities: 7
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Grafana version 2.6.0-beta1 Grafana 2.6.0-beta1 is affected by 7 vulnerabilities: 1 high, 1 medium, 5 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU89210 - Incorrect Authorization
CVE-2023-6152
CWE-863 Low
No
No
9.5.16, 10.0.11, 10.1.7, 10.2.4, 10.3.3 07.05.2024 SB2024050715
SB2024050717
SB2024050718
and 8 more
#VU64404 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-43815
CWE-22 Low
No
No
7.5.12, 8.3.2 15.06.2022 SB2021121022
SB2022062026
SB2022102094
and 8 more
#VU64397 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-21702
CWE-79 Low
No
No
7.5.15, 8.3.5 15.06.2022 SB2022061621
SB2022062026
SB2022102094
and 14 more
#VU64388 - Exposure of sensitive information to an unauthorized actor
CVE-2022-26148
CWE-200 Low
No
No
7.3.5 15.06.2022 SB2022061620
SB2023061619
SB2024022823
#VU28223 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-13430
CWE-79 Low
No
No
7.0.0 25.05.2020 SB2020052517
SB2020070752
#VU20497 - Improper Access Control
CVE-2019-15043
CWE-284 Medium
No
No
5.4.5, 6.3.4 02.09.2019 SB2019090201
SB2019090203
SB2020042903
and 7 more
#VU14575 - Improper Authentication
CVE-2018-15727
CWE-287 High
Public exploit available
No
4.6.4, 5.2.3 30.08.2018 SB2018083101
SB2018121805
SB2019010406