coldbraid

CVE-2021-39226 Grafana Labs Grafana

Grafana contains an authentication bypass vulnerability that allows authenticated and unauthenticated users to view and delete all snapshot data, potentially resulting in complete snapshot data loss.

CVSS
not scored

CWE-287

On CISA’s exploited list

Grafana Authentication Bypass Vulnerability

Added
2022-08-25
Federal patch deadline
2022-09-15
Ransomware use
not known