Intrusion PreventionGrafana.Labs.Grafana.avatar.SSRF
Description
This indicates an attack attempt to exploit a Server-Side Request Forgery vulnerability in Grafana.
The vulnerability is due to improper sanitation of user-supplied inputs. The vulnerability may allow a remote attacker to make arbitrary requests through Grafana. Failed exploits will likely crash the program, leading to a Denial of Service condition.
Affected Products
Grafana 3.0.1 to 7.0.1
Impact
Information Spoofing: Remote attackers can spoof data of vulnerable systems.
Recommended Actions
Apply the latest update from the vendor.
https://community.grafana.com/
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| ID | 55648 |
| Created | Apr 29, 2024 |
| Updated | Mar 20, 2025 |
| CVE ID | |
| Risk |
|
| Exploit Prediction Score | 92.84% |
| Default Action | drop |
| Active | |
| Affected OS | All |
| Affected App | Other |
| Profile Type | Permission/Privilege/Access Control |