ALPINE-CVE-2021-28148

See a problem?
Please try reporting it to the source first.
Source
https://security.alpinelinux.org/vuln/CVE-2021-28148
Import Source
https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-28148.json
JSON Data
https://api.osv.dev/v1/vulns/ALPINE-CVE-2021-28148
Upstream
Published
2021-03-22T15:15:14Z
Modified
2026-11-03T06:32:38Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

One of the usage insights HTTP API endpoints in Grafana Enterprise 6.x before 6.7.6, 7.x before 7.3.10, and 7.4.x before 7.4.5 is accessible without any authentication. This allows any unauthenticated user to send an unlimited number of requests to the endpoint, leading to a denial of service (DoS) attack against a Grafana Enterprise instance.

References

Affected packages

Alpine:v3.14
grafana

Package

Name
grafana
Purl
pkg:apk/alpine/grafana?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.0.0
Fixed
7.4.5-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-28148.json"
Alpine:v3.15
grafana

Package

Name
grafana
Purl
pkg:apk/alpine/grafana?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.0.0
Fixed
7.4.5-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-28148.json"
Alpine:v3.16
grafana

Package

Name
grafana
Purl
pkg:apk/alpine/grafana?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.0.0
Fixed
7.4.5-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-28148.json"
Alpine:v3.17
grafana

Package

Name
grafana
Purl
pkg:apk/alpine/grafana?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.0.0
Fixed
7.4.5-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-28148.json"
Alpine:v3.18
grafana

Package

Name
grafana
Purl
pkg:apk/alpine/grafana?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.0.0
Fixed
7.4.5-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-28148.json"
Alpine:v3.19
grafana

Package

Name
grafana
Purl
pkg:apk/alpine/grafana?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.0.0
Fixed
7.4.5-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-28148.json"
Alpine:v3.20
grafana

Package

Name
grafana
Purl
pkg:apk/alpine/grafana?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.0.0
Fixed
7.4.5-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-28148.json"
Alpine:v3.21
grafana

Package

Name
grafana
Purl
pkg:apk/alpine/grafana?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.0.0
Fixed
7.4.5-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-28148.json"
Alpine:v3.22
grafana

Package

Name
grafana
Purl
pkg:apk/alpine/grafana?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.0.0
Fixed
7.4.5-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-28148.json"
Alpine:v3.23
grafana

Package

Name
grafana
Purl
pkg:apk/alpine/grafana?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.0.0
Fixed
7.4.5-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-28148.json"
Alpine:v3.24
grafana

Package

Name
grafana
Purl
pkg:apk/alpine/grafana?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.0.0
Fixed
7.4.5-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-28148.json"