Grafana 授权不当漏洞(CVE-2023-2183)

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://grafana.com/security/security-advisories/cve-2023-2183/
• https://grafana.com/blog/grafana-security-release-new-grafana-versions-with-security-fixes-for-cve-2023-2183-and-cve-2023-2801/
• https://nvd.nist.gov/vuln/detail/CVE-2023-2183
• https://github.com/advisories/GHSA-cvm3-pp2j-chr3
• https://www.acunetix.com/vulnerabilities/web/grafana-missing-authorization-vulnerability-cve-2023-2183/
• https://bugzilla.redhat.com/show_bug.cgi?id=2210848
• https://cve.imfht.com/detail/CVE-2023-2183?lang=en
• https://db.gcve.eu/vuln/CVE-2023-2183

Related Vulnerabilities

• PoCgrafana-loki-api-exposure: Grafana Loki - Unauthenticated API Access
• Grafana /api/ds/query DuckDB SQL 注入漏洞（CVE-2024-9264）
• Grafana Dashboard 权限管理不当漏洞
• PoCgrafana-unauth-access: Grafana Unauthenticated Access
• PoCgrafana-metrics-exposure: Grafana Metrics Endpoint - Information Disclosure
• Grafana Grafana 权限管理不当漏洞
• Grafana Image Renderer 插件 需授权 文件上传限制不当漏洞 可导致远程代码执行
• Grafana存在重定向漏洞(CVE-2025-4123)
• Grafana /avatar 服务器端请求伪造漏洞（CVE-2020-13379）
• PoCCVE-2019-15043: Grafana - Improper Access Control