Patchwire CVEs, their patch status, and feeds to follow them

CVE-2023-1387

Fixed in a distro release EPSS 2%CVSS 4.2

Grafana is an open-source platform for monitoring and observability. Starting with the 9.1 branch, Grafana introduced the ability to search for a JWT in the URL query parameter auth_token and use it as the authentication token. By enabling the "url_login" configuration option (disabled by default), a JWT might be sent to data sources. If an attacker has access to the data source, the leaked token could be used to authenticate to Grafana.

Published 2023-04-26 · CVE record · OSV

Products: grafana, Grafana Enterprise

Distro releases

ReleasePackageFixed in
SUSE Enterprise Storage 7bind9.16.6-150000.12.65.1
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSbind9.16.6-150000.12.65.1
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSbind9.16.6-150000.12.65.1
SUSE Linux Enterprise Module for Package Hub 15 SP4grafana9.5.1-150200.3.41.3
SUSE Linux Enterprise Module for Package Hub 15 SP5grafana9.5.1-150200.3.41.3
SUSE Linux Enterprise Server 15 SP1-LTSSbind9.16.6-150000.12.65.1
SUSE Linux Enterprise Server 15 SP2-LTSSbind9.16.6-150000.12.65.1
SUSE Linux Enterprise Server for SAP Applications 15 SP1bind9.16.6-150000.12.65.1
SUSE Linux Enterprise Server for SAP Applications 15 SP2bind9.16.6-150000.12.65.1
SUSE Manager Client Tools 12grafana9.5.1-1.48.1
SUSE Manager Client Tools 12mgr-daemon4.3.7-1.41.1
SUSE Manager Client Tools 12spacecmd4.3.21-38.121.1
SUSE Manager Client Tools 12uyuni-common-libs4.3.8-1.33.1
SUSE Manager Client Tools 12zypp-plugin-spacewalk1.0.14-30.42.1
SUSE Manager Client Tools 12-BETAgolang-github-QubitProducts-exporter_exporter0.4.0-4.6.2
SUSE Manager Client Tools 12-BETAgolang-github-boynux-squid_exporter1.6-4.9.2
SUSE Manager Client Tools 12-BETAgolang-github-lusitaniae-apache_exporter1.0.0-4.12.4
SUSE Manager Client Tools 12-BETAgolang-github-prometheus-alertmanager0.26.0-4.12.4
SUSE Manager Client Tools 12-BETAgolang-github-prometheus-node_exporter1.5.0-4.15.4
SUSE Manager Client Tools 12-BETAgolang-github-prometheus-prometheus2.45.0-4.33.3
SUSE Manager Client Tools 12-BETAgolang-github-prometheus-promu0.14.0-4.12.2
SUSE Manager Client Tools 12-BETAgrafana9.5.8-4.21.2
SUSE Manager Client Tools 12-BETAkiwi-desc-saltboot0.1.1687520761.cefb248-4.15.2
SUSE Manager Client Tools 12-BETAmgr-push5.0.1-4.21.4
SUSE Manager Client Tools 12-BETAprometheus-blackbox_exporter0.24.0-3.6.3
SUSE Manager Client Tools 12-BETAprometheus-postgres_exporter0.10.1-3.6.4
SUSE Manager Client Tools 12-BETApython-hwdata2.3.5-15.12.2
SUSE Manager Client Tools 12-BETArhnlib5.0.1-24.30.3
SUSE Manager Client Tools 12-BETAspacecmd5.0.1-41.42.3
SUSE Manager Client Tools 12-BETAsupportutils-plugin-salt1.2.2-9.9.2
SUSE Manager Client Tools 12-BETAsupportutils-plugin-susemanager-client5.0.1-9.15.2
SUSE Manager Client Tools 12-BETAsystem-user-grafana1.0.0-3.7.2
SUSE Manager Client Tools 12-BETAsystem-user-prometheus1.0.0-3.7.2
SUSE Manager Client Tools 12-BETAuyuni-common-libs5.0.1-3.33.3
SUSE Manager Client Tools 15dracut-saltboot0.1.1681904360.84ef141-150000.1.50.1
SUSE Manager Client Tools 15grafana9.5.1-150000.1.48.5
SUSE Manager Client Tools 15mgr-daemon4.3.7-150000.1.41.1
SUSE Manager Client Tools 15spacecmd4.3.21-150000.3.98.1
SUSE Manager Client Tools 15uyuni-common-libs4.3.8-150000.1.33.1
SUSE Manager Client Tools 15zypp-plugin-spacewalk1.0.14-150000.3.35.1
SUSE Manager Client Tools 15-BETAansible2.9.27-159000.3.9.1
SUSE Manager Client Tools 15-BETAdracut-saltboot0.1.1681904360.84ef141-159000.3.30.1
SUSE Manager Client Tools 15-BETAgolang-github-QubitProducts-exporter_exporter0.4.0-159000.4.6.1
SUSE Manager Client Tools 15-BETAgolang-github-boynux-squid_exporter1.6-159000.4.9.1
SUSE Manager Client Tools 15-BETAgolang-github-lusitaniae-apache_exporter1.0.0-159000.4.12.1
SUSE Manager Client Tools 15-BETAgolang-github-prometheus-prometheus2.45.0-159000.6.33.1
SUSE Manager Client Tools 15-BETAgrafana9.5.8-159000.4.24.1
SUSE Manager Client Tools 15-BETAmgr-push5.0.1-159000.4.21.1
SUSE Manager Client Tools 15-BETAprometheus-blackbox_exporter0.24.0-159000.3.6.1
SUSE Manager Client Tools 15-BETAprometheus-postgres_exporter0.10.1-159000.3.6.1
SUSE Manager Client Tools 15-BETApython-hwdata2.3.5-159000.5.13.1
SUSE Manager Client Tools 15-BETApython-pyvmomi6.7.3-159000.3.6.1
SUSE Manager Client Tools 15-BETArhnlib5.0.1-159000.6.30.1
SUSE Manager Client Tools 15-BETAspacecmd5.0.1-159000.6.42.1
SUSE Manager Client Tools 15-BETAspacewalk-client-tools5.0.1-159000.6.48.1
SUSE Manager Client Tools 15-BETAsupportutils-plugin-salt1.2.2-159000.5.9.1
SUSE Manager Client Tools 15-BETAsupportutils-plugin-susemanager-client5.0.1-159000.6.15.1
SUSE Manager Client Tools 15-BETAuyuni-common-libs5.0.1-159000.3.33.1
SUSE Manager Client Tools 15-BETAuyuni-proxy-systemd-services5.0.1-159000.3.9.1
SUSE Manager Client Tools Beta for SLE Micro 5dracut-saltboot0.1.1681904360.84ef141-159000.3.30.1
SUSE Manager Client Tools Beta for SLE Micro 5golang-github-QubitProducts-exporter_exporter0.4.0-159000.4.6.1
SUSE Manager Client Tools Beta for SLE Micro 5prometheus-blackbox_exporter0.24.0-159000.3.6.1
SUSE Manager Client Tools Beta for SLE Micro 5uyuni-proxy-systemd-services5.0.1-159000.3.9.1
SUSE Manager Client Tools for SLE Micro 5bind9.16.6-150000.12.65.1
SUSE Manager Client Tools for SLE Micro 5dracut-saltboot0.1.1681904360.84ef141-150000.1.50.1
SUSE Manager Proxy Module 4.2zypp-plugin-spacewalk1.0.14-150000.3.35.1
SUSE Manager Proxy Module 4.3zypp-plugin-spacewalk1.0.14-150000.3.35.1
Ubuntu 16.04 LTSgrafanano fix
openSUSE Leap 15.4bind9.16.6-150000.12.65.1
openSUSE Leap 15.4dracut-saltboot0.1.1681904360.84ef141-150000.1.50.1
openSUSE Leap 15.4grafana9.5.1-150200.3.41.3
openSUSE Leap 15.4spacecmd4.3.21-150000.3.98.1
openSUSE Leap 15.4wire0.5.0-150000.1.12.3
openSUSE Leap 15.5dracut-saltboot0.1.1681904360.84ef141-150000.1.50.1
openSUSE Leap 15.5grafana9.5.1-150200.3.41.3
openSUSE Leap 15.5spacecmd4.3.21-150000.3.98.1
openSUSE Leap 15.5wire0.5.0-150000.1.12.3
openSUSE Tumbleweedgrafana9.5.1-1.1