LOW2.2

GHSA-66c4-2g2v-54qw

Grafana org admin can delete pending invites in different org

Details

Organization admins can delete pending invites created in an organization they are not part of.

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/github.com/grafana/grafana

Introduced in: 0

No fixed version published yet for github.com/grafana/grafana (go modules). Pin to a known-safe version or switch to an alternative.

References

https://nvd.nist.gov/vuln/detail/CVE-2024-10452[ADVISORY]
https://github.com/advisories/GHSA-66c4-2g2v-54qw[ADVISORY]
https://github.com/grafana/grafana[PACKAGE]
https://grafana.com/security/security-advisories/cve-2024-10452[WEB]
https://www.cve.org/CVERecord?id=CVE-2024-10452[WEB]