Description
A request to the Grafana plugin resources endpoint can cause unbounded memory allocation by reading the entire request body into memory. An authenticated user can exploit this to trigger an out-of-memory condition, potentially causing a denial of service.
Remediation
References
Related Vulnerabilities
TYPO3 Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2010-3673)
Oracle Database Server CVE-2006-1866 Vulnerability (CVE-2006-1866)
Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-4789)
WordPress Plugin GdeSlon Affiliate Shop Open Redirect (2.0)
WordPress Plugin Caldera Forms-More Than Contact Forms Cross-Site Scripting (1.5.4)