Description

Grafana <= 6.4.3 has an Arbitrary File Read vulnerability, which could be exploited by an authenticated attacker that has privileges to modify the data source configurations.

Remediation

References

CVE-2019-19499

Related Vulnerabilities

WordPress Plugin WP to Twitter Security Bypass (3.2.19)

WordPress Plugin Admin Columns Cross-Site Scripting (4.3.1)

WordPress Plugin WP Customer Reviews Cross-Site Scripting (3.4.2)

phpMyAdmin Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-4729)

WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2019-14540)

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities CWE-200 CVE-2019-19499