CVE-2021-27358
HIGH8.2EPSS 92.4%Denial of service in Grafana
Published: 2/15/2022Modified: 4/3/2025
Description
The snapshot feature in Grafana 6.7.3 through 7.4.1 can allow an unauthenticated remote attackers to trigger a Denial of Service via a remote API call if a commonly used configuration is set.
Affected packages (2)
- Bitnami/grafana>= 6.7.3, < 7.4.2
- Go/github.com/grafana/grafana>= 6.7.3, < 7.4.2
CVSS scores
| Source | Version | Severity | Vector |
|---|---|---|---|
| osv | CVSS 3.1 | HIGH8.2 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H/E:U/RL:O/RC:R |
References (8)
- ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2021-27358
- WEBhttps://github.com/grafana/grafana/blob/master/CHANGELOG.md
- WEBhttps://github.com/grafana/grafana/blob/master/CHANGELOG.md#742-2021-02-17
- WEBhttps://github.com/grafana/grafana/pull/31263
- WEBhttps://grafana.com/docs/grafana/latest/release-notes/release-notes-7-4-2
- WEBhttps://grafana.com/docs/grafana/latest/release-notes/release-notes-7-4-2/
- WEBhttps://security.netapp.com/advisory/ntap-20210513-0007
- WEBhttps://security.netapp.com/advisory/ntap-20210513-0007/