CVE-2020-13379
HIGH 8.2EPSS 99.9%
The avatar feature in Grafana 3.0.1 through 7.0.1 has an SSRF Incorrect Access Control issue. This vulnerability allows any unauthenticated user/client to make Grafana send HTTP requests to any URL and return its result to the user/client. This can be used to gain information about the network that Grafana is running on. Furthermore, passing invalid URL objects could be used for DOS'ing Grafana via SegFault.
- CVSS v3.1 NVD
- 8.2 HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H - CVSS v3.1 GitHub
- 5.4 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N/E:F/RL:O/RC:C - CVSS v2.0 NVD
- 6.4 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:P - EPSS
- 99.86% chance of exploitation in the next 30 days, 100th percentile
- Nuclei
- high · CWE-918
- Published
- 2020-06-03
- Updated
- 2024-08-04
Proof-of-concept exploits (2)
- http://packetstormsecurity.com/files/158320/Grafana-7.0.1-Denial-Of-Service.html
- https://mostwanted002.cf/post/grafanados/
Nuclei templates (1)
ExploitDB entries (1)
Exploit collections (1)
- CVE-2020-13379.yamlzan8in/afrog
Security advisories
- https://community.grafana.com/t/grafana-7-0-2-and-6-7-4-security-update/31408
- https://community.grafana.com/t/release-notes-v6-7-x/27119
- https://community.grafana.com/t/release-notes-v7-0-x/29381
- https://grafana.com/blog/2020/06/03/grafana-6.7.4-and-7.0.2-released-with-important-secur…
- http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00060.html
- http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00083.html
- http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00009.html
- http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00017.html
- http://www.openwall.com/lists/oss-security/2020/06/03/4
- http://www.openwall.com/lists/oss-security/2020/06/09/2
- https://mostwanted002.cf/post/grafanados
- https://rhynorater.github.io/CVE-2020-13379-Write-Up
- https://security.netapp.com/advisory/ntap-20200608-0006
- advisories/GHSA-wc9w-wvq2-ffm9