https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 14 Nov 2026 16:53:31 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-106472 <p>Grafana&#39;s Prometheus data source passes the resource path supplied by the caller to the configured Prometheus server without restricting it to the supported API endpoints [missing path allowlist]. A user with permission to query the data source can read responses from other endpoints on that server using the data source&#39;s credentials.</p> <p>Grafana&#39;s Prometheus data source passes the resource path supplied by the caller to the configured Prometheus server without restricting it to the supported API endpoints [missing path allowlist]. A user with permission to query the data source can read responses from other endpoints on that server using the data source&#39;s credentials.</p> https://db.gcve.eu/vuln/fkie_cve-2026-106472 https://db.gcve.eu/vuln/ghsa-fm3v-fvpq-jvxg <p>Grafana&#39;s Prometheus data source passes the resource path supplied by the caller to the configured Prometheus server without restricting it to the supported API endpoints [missing path allowlist]. A user with permission to query the data source can read responses from other endpoints on that server using the data source&#39;s credentials.</p> <p>Grafana&#39;s Prometheus data source passes the resource path supplied by the caller to the configured Prometheus server without restricting it to the supported API endpoints [missing path allowlist]. A user with permission to query the data source can read responses from other endpoints on that server using the data source&#39;s credentials.</p> https://db.gcve.eu/vuln/ghsa-fm3v-fvpq-jvxg https://db.gcve.eu/vuln/msrc_cve-2026-106472 msrc_CVE-2026-106472 https://db.gcve.eu/vuln/msrc_cve-2026-106472 https://db.gcve.eu/vuln/wid-sec-w-2026-4568 <p>Ein Angreifer kann mehrere Schwachstellen in Grafana ausnutzen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren und um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Grafana ausnutzen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren und um Sicherheitsvorkehrungen zu umgehen.</p> https://db.gcve.eu/vuln/wid-sec-w-2026-4568