Patchwire CVEs, their patch status, and feeds to follow them

CVE-2023-6152

Fixed in a distro release EPSS 1%CVSS 5.4

A user changing their email after signing up and verifying it can change it without verification in profile settings. The configuration option "verify_email_enabled" will only validate email only on sign up.

Published 2024-02-13 · CVE record · OSV

Products: grafana, Grafana Enterprise

Fixed upstream

EcosystemPackageFixed in
Gogithub.com/grafana/grafana9.5.16
Gogithub.com/grafana/grafana10.0.11
Gogithub.com/grafana/grafana10.1.7
Gogithub.com/grafana/grafana10.2.4
Gogithub.com/grafana/grafana10.3.3

Distro releases

ReleasePackageFixed in
Chainguardgrafana10.3.3-r0
Chainguardgrafana-10.110.1.7-r0
Chainguardgrafana-77.5.27-r0
Chainguardgrafana-7-dashboards7.5.27-r0
Chainguardgrafana-7-homepage7.5.27-r0
Chainguardgrafana-99.5.16-r0
Chainguardgrafana-dashboards10.3.3-r0
Chainguardgrafana-homepage10.3.3-r0
Chainguardgrafana-oci-compat-99.5.16-r0
SUSE Enterprise Storage 7.1supportutils-plugin-salt1.2.3-150000.3.16.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSsupportutils-plugin-salt1.2.3-150000.3.16.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSsupportutils-plugin-salt1.2.3-150000.3.16.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSsupportutils-plugin-salt1.2.3-150000.3.16.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSsupportutils-plugin-salt1.2.3-150000.3.16.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSSsupportutils-plugin-salt1.2.3-150000.3.16.1
SUSE Linux Enterprise Module for Basesystem 15 SP6supportutils-plugin-salt1.2.3-150000.3.16.1
SUSE Linux Enterprise Module for Package Hub 15 SP5golang-github-prometheus-promu0.14.0-150000.3.18.2
SUSE Linux Enterprise Module for Package Hub 15 SP5grafana9.5.18-150200.3.56.1
SUSE Linux Enterprise Module for Package Hub 15 SP6golang-github-prometheus-promu0.17.0-150000.3.24.1
SUSE Linux Enterprise Module for Package Hub 15 SP6grafana9.5.18-150200.3.56.1
SUSE Linux Enterprise Module for Package Hub 15 SP6grafana10.4.13-150200.3.59.1
SUSE Linux Enterprise Server 12 SP5golang-github-prometheus-node_exporter1.7.0-1.30.2
SUSE Linux Enterprise Server 15 SP3-LTSSsupportutils-plugin-salt1.2.3-150000.3.16.1
SUSE Linux Enterprise Server 15 SP4-LTSSsupportutils-plugin-salt1.2.3-150000.3.16.1
SUSE Linux Enterprise Server 15 SP5-LTSSsupportutils-plugin-salt1.2.3-150000.3.16.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5golang-github-prometheus-node_exporter1.7.0-1.30.2
SUSE Linux Enterprise Server for SAP Applications 15 SP3supportutils-plugin-salt1.2.3-150000.3.16.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4supportutils-plugin-salt1.2.3-150000.3.16.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5supportutils-plugin-salt1.2.3-150000.3.16.1
SUSE Manager Client Tools 12golang-github-prometheus-alertmanager0.26.0-1.27.2
SUSE Manager Client Tools 12golang-github-prometheus-node_exporter1.7.0-1.30.2
SUSE Manager Client Tools 12golang-github-prometheus-prometheus2.53.3-1.56.1
SUSE Manager Client Tools 12golang-github-prometheus-promu0.17.0-1.24.1
SUSE Manager Client Tools 12golang-github-prometheus-promu0.14.0-1.18.1
SUSE Manager Client Tools 12grafana9.5.18-1.63.1
SUSE Manager Client Tools 12grafana10.4.13-1.66.2
SUSE Manager Client Tools 12mgr-daemon4.3.9-1.47.1
SUSE Manager Client Tools 12spacecmd4.3.27-38.139.1
SUSE Manager Client Tools 12spacecmd5.0.11-38.153.1
SUSE Manager Client Tools 12spacewalk-client-tools4.3.19-52.98.1
SUSE Manager Client Tools 12spacewalk-koan4.3.6-24.36.1
SUSE Manager Client Tools 12supportutils-plugin-salt1.2.3-6.25.1
SUSE Manager Client Tools 12supportutils-plugin-susemanager-client5.0.4-6.33.1
SUSE Manager Client Tools 12uyuni-common-libs4.3.10-1.39.1
SUSE Manager Client Tools 12uyuni-tools0.1.28-1.16.1
SUSE Manager Client Tools 12-BETAgolang-github-prometheus-alertmanager0.26.0-4.18.2
SUSE Manager Client Tools 12-BETAgolang-github-prometheus-node_exporter1.7.0-4.18.2
SUSE Manager Client Tools 12-BETAgolang-github-prometheus-promu0.14.0-4.15.1
SUSE Manager Client Tools 12-BETAgrafana9.5.16-4.27.1
SUSE Manager Client Tools 12-BETAspacecmd5.0.5-41.48.1
SUSE Manager Client Tools 12-BETAspacewalk-client-tools5.0.4-55.51.1
SUSE Manager Client Tools 12-BETAsupportutils-plugin-susemanager-client5.0.3-9.21.1
SUSE Manager Client Tools 12-BETAuyuni-tools0.1.7-3.8.1
SUSE Manager Client Tools 15POS_Image-Graphical70.1.1710765237.46af599-150000.1.21.2
SUSE Manager Client Tools 15POS_Image-JeOS70.1.1710765237.46af599-150000.1.21.2
SUSE Manager Client Tools 15ansible2.9.27-150000.1.17.2
SUSE Manager Client Tools 15dracut-saltboot0.1.1710765237.46af599-150000.1.53.2
SUSE Manager Client Tools 15dracut-saltboot0.1.1728559936.c16d4fb-150000.1.56.1
SUSE Manager Client Tools 15golang-github-prometheus-prometheus2.53.3-150000.3.59.1
SUSE Manager Client Tools 15grafana9.5.18-150000.1.63.2
SUSE Manager Client Tools 15grafana10.4.13-150000.1.66.1
SUSE Manager Client Tools 15mgr-daemon4.3.9-150000.1.47.2
SUSE Manager Client Tools 15spacecmd4.3.27-150000.3.116.2
SUSE Manager Client Tools 15spacecmd5.0.11-150000.3.130.1
SUSE Manager Client Tools 15spacewalk-client-tools4.3.19-150000.3.89.2
SUSE Manager Client Tools 15spacewalk-koan4.3.6-150000.3.33.2
SUSE Manager Client Tools 15supportutils-plugin-salt1.2.3-150000.3.16.1
SUSE Manager Client Tools 15supportutils-plugin-susemanager-client5.0.4-150000.3.27.1
SUSE Manager Client Tools 15uyuni-common-libs4.3.10-150000.1.39.2
SUSE Manager Client Tools 15uyuni-proxy-systemd-services4.3.12-150000.1.21.2
SUSE Manager Client Tools 15uyuni-tools0.1.28-150000.1.16.1
SUSE Manager Client Tools 15-BETAPOS_Image-Graphical70.1.1710765237.46af599-159000.3.24.2
SUSE Manager Client Tools 15-BETAPOS_Image-JeOS70.1.1710765237.46af599-159000.3.24.2
SUSE Manager Client Tools 15-BETAansible2.9.27-159000.3.12.2
SUSE Manager Client Tools 15-BETAdracut-saltboot0.1.1710765237.46af599-159000.3.33.2
SUSE Manager Client Tools 15-BETAgrafana9.5.16-159000.4.30.2
SUSE Manager Client Tools 15-BETAspacecmd5.0.5-159000.6.48.2
SUSE Manager Client Tools 15-BETAspacewalk-client-tools5.0.4-159000.6.54.2
SUSE Manager Client Tools 15-BETAsupportutils-plugin-susemanager-client5.0.3-159000.6.21.2
SUSE Manager Client Tools 15-BETAuyuni-tools0.1.7-159000.3.8.1
SUSE Manager Client Tools Beta for SLE Micro 5golang-github-prometheus-node_exporter1.5.0-159000.6.2.1
SUSE Manager Client Tools Beta for SLE Micro 5uyuni-tools0.1.7-159000.3.8.1
SUSE Manager Client Tools for SLE Micro 5dracut-saltboot0.1.1710765237.46af599-150000.1.53.2
SUSE Manager Client Tools for SLE Micro 5dracut-saltboot0.1.1728559936.c16d4fb-150000.1.56.1
SUSE Manager Client Tools for SLE Micro 5uyuni-proxy-systemd-services4.3.12-150000.1.21.2
SUSE Manager Client Tools for SLE Micro 5uyuni-tools0.1.28-150000.1.16.1
SUSE Manager Proxy 4.3supportutils-plugin-salt1.2.3-150000.3.16.1
SUSE Manager Proxy Module 4.3ansible2.9.27-150000.1.17.2
SUSE Manager Proxy Module 4.3uyuni-proxy-systemd-services4.3.12-150000.1.21.2
SUSE Manager Server 4.3supportutils-plugin-salt1.2.3-150000.3.16.1
Ubuntu 16.04 LTSgrafanano fix
Wolfigrafana10.3.3-r0
openSUSE Leap 15.5POS_Image-Graphical70.1.1710765237.46af599-150000.1.21.2
openSUSE Leap 15.5POS_Image-JeOS70.1.1710765237.46af599-150000.1.21.2
openSUSE Leap 15.5ansible2.9.27-150000.1.17.2
openSUSE Leap 15.5dracut-saltboot0.1.1710765237.46af599-150000.1.53.2
openSUSE Leap 15.5golang-github-prometheus-promu0.14.0-150000.3.18.2
openSUSE Leap 15.5grafana9.5.18-150200.3.56.1
openSUSE Leap 15.5mybatis3.5.6-150200.5.6.1
openSUSE Leap 15.5spacecmd4.3.27-150000.3.116.2
openSUSE Leap 15.6dracut-saltboot0.1.1728559936.c16d4fb-150000.1.56.1
openSUSE Leap 15.6golang-github-prometheus-promu0.17.0-150000.3.24.1
openSUSE Leap 15.6grafana9.5.18-150200.3.56.1
openSUSE Leap 15.6grafana10.4.13-150200.3.59.1
openSUSE Leap 15.6mybatis3.5.6-150200.5.6.1
openSUSE Leap 15.6spacecmd5.0.11-150000.3.130.1
openSUSE Leap 15.6supportutils-plugin-salt1.2.3-150000.3.16.1
openSUSE Leap 15.6supportutils-plugin-susemanager-client5.0.4-150000.3.27.1
openSUSE Tumbleweedgrafana10.1.7-1.1