CVE-2021-27358
Denial of service in Grafana
8.2
HIGH
CVSS 3.1
EPSS 92.4%
Description
The snapshot feature in Grafana 6.7.3 through 7.4.1 can allow an unauthenticated remote attackers to trigger a Denial of Service via a remote API call if a commonly used configuration is set.
How to fix CVE-2021-27358
To remediate CVE-2021-27358, upgrade the affected package to a fixed version below.
- Bitnami/grafana—upgrade to 7.4.2 or later
- —upgrade to 7.4.2 or later
Is CVE-2021-27358 being exploited?
Likely — EPSS is 92.4%, placing CVE-2021-27358 in the top tier of vulnerabilities by exploitation probability. Prioritise patching.
Affected packages (2)
- >= 6.7.3, < 7.4.2
- >= 6.7.3, < 7.4.2
CVSS scores
| Source | Version | Severity | Vector |
|---|---|---|---|
| osv | CVSS 3.1 | HIGH8.2 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H/E:U/RL:O/RC:R |