CVE-2021-27358

The snapshot feature in Grafana 6.7.3 through 7.4.1 can allow an unauthenticated remote attackers to trigger a Denial of Service via a remote API call if a…

published March 18, 2021

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.7th percentile for exploit probability.

CVSS
—
EPSS
83%
Percentile
99.7
In the wild
Unconfirmed
What it is

The snapshot feature in Grafana 6.7.3 through 7.4.1 can allow an unauthenticated remote attackers to trigger a Denial of Service via a remote API call if a commonly used configuration is set.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.83042 · 99.7th percentile
Published
2021-03-18T19:43Z
EPSS history
Timeline
  • 18 MAR 19:43Z
    The snapshot feature in Grafana 6.7.3 through 7.4.1 can allow an unauthenticated remote attackers to trigger a Denial of Service via a remote API call if a…
    cvelistv5