SUSE-SU-2023:0821-1

Advisory lineage Upstream: 4 Downstream: 0
Published: 20 Mar 2023, 15:35
Last modified:04 Feb 2026, 04:24

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

20 Mar 2023, 15:35
Published
Vulnerability first disclosed
04 Feb 2026, 04:24
Last Modified
Vulnerability information updated

Description

Security update for grafana This update for grafana fixes the following issues: - CVE-2022-23552: Fixed SVG processing by adding a dompurify preprocessor step (bsc#1207749). - CVE-2022-39324: Fixed originalUrl spoof security issue (bsc#1207750). - CVE-2022-41723: Fixed go issue to avoid quadratic complexity in HPACK decoding (bsc#1208293). - CVE-2022-46146: Fixed basic authentication bypass by updating the exporter toolkit (bsc#1208065). - Trim leading and trailing whitespaces from email and username on signup - Fix invitation validation: Check whether the provided email address is the same as where the invitation is sent

Affected Systems

  • opensuse•grafana&distro=openSUSE Leap 15.4

    < 8.5.20-150200.3.35.1

  • suse•grafana&distro=SUSE Linux Enterprise Module for Package Hub 15 SP4

    < 8.5.20-150200.3.35.1

References (9)