UBUNTU-CVE-2024-9476

Advisory lineage Upstream: 1 Downstream: 0
Upstream
CVE-2024-9476
Published: 13 Nov 2024, 17:15
Last modified:24 Oct 2025, 05:06

Vulnerability Summary

Overall Risk (default)
low
20/100
CVSS Score
5.1 MEDIUM
4.0 (osv_ubuntu)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

13 Nov 2024, 17:15
Published
Vulnerability first disclosed
24 Oct 2025, 05:06
Last Modified
Vulnerability information updated

Description

A vulnerability in Grafana Labs Grafana OSS and Enterprise allows Privilege Escalation allows users to gain access to resources from other organizations within the same Grafana instance via the Grafana Cloud Migration Assistant.This vulnerability will only affect users who utilize the Organizations feature to isolate resources on their Grafana instance.

CVSS Metrics

  • v4.0•MEDIUM•Score: 5.1CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Affected Systems

  • ubuntu•grafana

    all

References (2)