Description

Grafana before 4.6.5 and 5.x before 5.3.3 allows remote authenticated users to read arbitrary files by leveraging Editor or Admin permissions.

Remediation

References

CVE-2018-19039

Related Vulnerabilities

WordPress Plugin Smart Flv 'jwplayer.swf' Multiple Cross-Site Scripting Vulnerabilities (1.0)

WordPress Plugin Delete All Comments Cross-Site Request Forgery (1.0)

Joomla! Core 3.0.0 Cross-Site Scripting (3.0.0)

WordPress Plugin MasterStudy LMS-for Online Courses and Education Information Disclosure (3.2.10)

WordPress Plugin HTML5 Video Player with Playlist Multiple Cross-Site Scripting Vulnerabilities (2.40)

Severity

Medium

Classification

CVE-2018-19039 CWE-200 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities