Description
** DISPUTED ** Grafana 8.4.3 allows unauthenticated access via (for example) a /dashboard/snapshot/*?orgId=0 URI. NOTE: the vendor considers this a UI bug, not a vulnerability.
Remediation
References
Related Vulnerabilities
WordPress Plugin Testimonial Slider Multiple Cross-Site Scripting Vulnerabilities (1.2.5)
WordPress Plugin Slider Hero with Animation, Video Background Cross-Site Request Forgery (8.2.0)
Drupal Core 6.x Multiple Vulnerabilities (6.0 - 6.5)
MyBB Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-9411)
Sqlite NULL Pointer Dereference Vulnerability (CVE-2020-9327)