CVE-2024-11741
Fixed in a distro release EPSS <1%CVSS 4.3
Grafana is an open-source platform for monitoring and observability. The Grafana Alerting VictorOps integration was not properly protected and could be exposed to users with Viewer permission. Fixed in versions 11.5.0, 11.4.1, 11.3.3, 11.2.6, 11.1.11, 11.0.11 and 10.4.15
Products: grafana
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Go | github.com/grafana/grafana | 11.4.1 |
| Go | github.com/grafana/grafana | 11.3.3 |
| Go | github.com/grafana/grafana | 11.2.6 |
| Go | github.com/grafana/grafana | 11.1.11 |
| Go | github.com/grafana/grafana | 11.0.11 |
| Go | github.com/grafana/grafana | 10.4.15 |
| Go | github.com/grafana/grafana | 0.0.0-20250129224826-70073427041e |
| Go | github.com/grafana/grafana | 1.9.2-0.20250129224826-70073427041e |
| Go | github.com/grafana/grafana | no fix |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | grafana-11.0 | 0 |
| Chainguard | grafana-11.2 | 11.2.10.01-r7 |
| Chainguard | grafana-11.3 | 0 |
| Chainguard | grafana-11.3-oci-compat | 0 |
| Chainguard | grafana-11.4 | 11.4.1-r0 |
| Chainguard | grafana-11.4-oci-compat | 11.4.1-r0 |
| Chainguard | grafana-fips-11.0 | 0 |
| Chainguard | grafana-fips-11.0-oci-compat | 0 |
| Chainguard | grafana-fips-11.3 | 0 |
| Chainguard | grafana-fips-11.3-oci-compat | 0 |
| Chainguard | grafana-fips-11.4 | 11.4.1-r0 |
| Chainguard | grafana-fips-11.6 | 0 |
| Chainguard | grafana-fips-12.0 | 12.0.10-r6 |
| Chainguard | grafana-fips-12.1 | 12.1.10.01-r3 |
| Chainguard | grafana-fips-12.2 | 0 |
| Chainguard | grafana-fips-12.3 | 0 |
| Chainguard | grafana-fips-12.4 | 0 |
| Chainguard | grafana-fips-13.0 | 0 |
| Chainguard | grafana-fips-13.1 | 13.1.0-r0 |
| Chainguard | grafana-oci-compat | 0 |
| SUSE Linux Enterprise Module for Package Hub 15 SP6 | govulncheck-vulndb | 0.0.20250207T224745-150000.1.32.1 |
| SUSE Linux Enterprise Module for Package Hub 15 SP6 | grafana | 10.4.15-150200.3.64.1 |
| SUSE Manager Client Tools 12 | grafana | 10.4.15-1.71.1 |
| SUSE Manager Client Tools 15 | grafana | 10.4.15-150000.1.71.1 |
| SUSE Manager Server 4.3 | release-notes-susemanager | 4.3.15.2-150400.3.133.1 |
| Ubuntu 16.04 LTS | grafana | no fix |
| Wolfi | grafana-11.4 | 11.4.1-r0 |
| Wolfi | grafana-11.4-oci-compat | 11.4.1-r0 |
| openSUSE Leap 15.6 | govulncheck-vulndb | 0.0.20250207T224745-150000.1.32.1 |
| openSUSE Leap 15.6 | grafana | 10.4.15-150200.3.64.1 |
| openSUSE Tumbleweed | govulncheck-vulndb | 0.0.20250204T220613-1.1 |
| openSUSE Tumbleweed | grafana | 11.3.3-1.1 |