Known vulnerabilities in Grafana 5.3.0-beta3

Software: Grafana
Version: 5.3.0-beta3
Software CPE: cpe:2.3:a:grafana_labs:grafana:*:*:*:*:*:*:*:*
Total vulnerabilities: 11
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Grafana version 5.3.0-beta3 Grafana 5.3.0-beta3 is affected by 11 vulnerabilities: 4 medium, 7 low Critical High Medium Low

Vulnerabilities (11)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU122160 - Resource Management Errors
CVE-2026-21720
CWE-399 Medium
No
No
11.6.9+security-01, 12.0.8+security-01, 12.1.5+security-01, 12.2.3+security-01, 12.3.1+security-01 30.01.2026 SB2026013061
SB20260325198
SB2026040631
#VU89210 - Incorrect Authorization
CVE-2023-6152
CWE-863 Low
No
No
9.5.16, 10.0.11, 10.1.7, 10.2.4, 10.3.3 07.05.2024 SB2024050715
SB2024050717
SB2024050718
and 8 more
#VU72131 - Exposure of sensitive information to an unauthorized actor
CVE-2022-39201
CWE-200 Medium
No
No
8.5.14, 9.1.8 12.02.2023 SB2023021201
SB2023021202
SB2023021203
and 12 more
#VU64404 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-43815
CWE-22 Low
No
No
7.5.12, 8.3.2 15.06.2022 SB2021121022
SB2022062026
SB2022102094
and 8 more
#VU64397 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-21702
CWE-79 Low
No
No
7.5.15, 8.3.5 15.06.2022 SB2022061621
SB2022062026
SB2022102094
and 14 more
#VU64394 - Authorization Bypass Through User-Controlled Key
CVE-2022-21713
CWE-639 Low
No
No
7.5.15, 8.3.5 15.06.2022 SB2022061621
SB2022062026
SB2022102094
and 13 more
#VU64388 - Exposure of sensitive information to an unauthorized actor
CVE-2022-26148
CWE-200 Low
No
No
7.3.5 15.06.2022 SB2022061620
SB2023061619
SB2024022823
#VU28581 - Server-Side Request Forgery (SSRF)
CVE-2020-13379
CWE-918 Medium
Public exploit available
No
6.7.4, 7.0.2 04.06.2020 SB2020060421
SB2020062606
SB2020062610
and 10 more
#VU28223 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-13430
CWE-79 Low
No
No
7.0.0 25.05.2020 SB2020052517
SB2020070752
#VU20497 - Improper Access Control
CVE-2019-15043
CWE-284 Medium
No
No
5.4.5, 6.3.4 02.09.2019 SB2019090201
SB2019090203
SB2020042903
and 7 more
#VU15923 - Exposure of sensitive information to an unauthorized actor
CVE-2018-19039
CWE-200 Low
No
No
4.6.5, 5.3.3 15.11.2018 SB2018111603
SB2018111604
SB2019041109
and 2 more