GHSA-66c4-2g2v-54qw

Source

https://github.com/advisories/GHSA-66c4-2g2v-54qw

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/10/GHSA-66c4-2g2v-54qw/GHSA-66c4-2g2v-54qw.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-66c4-2g2v-54qw

Aliases

Published

2024-10-29T18:30:36Z

Modified

2024-11-04T21:25:35Z

Severity

2.2 (Low) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N CVSS Calculator
2.1 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N CVSS Calculator

Summary

Grafana org admin can delete pending invites in different org

Details

Organization admins can delete pending invites created in an organization they are not part of.

Database specific

{
    "cwe_ids": [
        "CWE-639"
    ],
    "severity": "LOW",
    "nvd_published_at": "2024-10-29T16:15:04Z",
    "github_reviewed_at": "2024-10-29T20:29:13Z",
    "github_reviewed": true
}

References

Affected packages

Go / github.com/grafana/grafana

Package

Name: github.com/grafana/grafana; View open source insights on deps.dev
Purl: pkg:golang/github.com/grafana/grafana

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Last affected

10.4.0