GO-2024-2697
Grafana: Users outside an organization can delete a snapshot with its key in github.com/grafana/grafana
Details
Grafana: Users outside an organization can delete a snapshot with its key in github.com/grafana/grafana.
NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions.
(If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.)
The additional affected modules and versions are: github.com/grafana/grafana from v9.5.0 before v9.5.18, from v10.0.0 before v10.0.13, from v10.1.0 before v10.1.9, from v10.2.0 before v10.2.6, from v10.3.0 before v10.3.5.
Are you affected?
Enter the version of the package you're using.
Affected packages
0 No fixed version published yet for github.com/grafana/grafana (go modules). Pin to a known-safe version or switch to an alternative.