UBUNTU-CVE-2024-8118

Advisory lineage Upstream: 1 Downstream: 0
Upstream
CVE-2024-8118
Published: 26 Sept 2024, 19:15
Last modified:24 Oct 2025, 05:06

Vulnerability Summary

Overall Risk (default)
low
20/100
CVSS Score
5.1 MEDIUM
4.0 (osv_ubuntu)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

26 Sept 2024, 19:15
Published
Vulnerability first disclosed
24 Oct 2025, 05:06
Last Modified
Vulnerability information updated

Description

In Grafana, the wrong permission is applied to the alert rule write API endpoint, allowing users with permission to write external alert instances to also write alert rules.

CVSS Metrics

  • v4.0•MEDIUM•Score: 5.1CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Affected Systems

  • ubuntu•grafana

    all

References (3)