PT-2020-5961 · Grafana+4 · Grafana+4
Published
2020-06-03
·
Updated
2024-11-27
·
CVE-2020-13379
CVSS v3.1
8.2
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Grafana versions 3.0.1 through 7.0.1
Description
The avatar feature in Grafana has an SSRF Incorrect Access Control issue, allowing any unauthenticated user/client to make Grafana send HTTP requests to any URL and return its result to the user/client. This can be used to gain information about the network that Grafana is running on. Furthermore, passing invalid URL objects could be used for DOS'ing Grafana via SegFault. The vulnerability may also allow remote code execution.
Recommendations
For Grafana versions 3.0.1 through 7.0.1, consider disabling the avatar feature until a patch is available to prevent exploitation of the SSRF vulnerability. Restrict access to the avatar feature to minimize the risk of unauthorized access to internal information. Avoid using the avatar feature to fetch internal files or make unauthorized HTTP requests until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
SSRF
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Centos
Grafana
Red Hat
Suse