Grafana MSSQL Data Source Plugin: Restriction Bypass Leading…(CVE-2026-33375)

概要

Grafana MSSQL Data Source Plugin: Restriction Bypass Leading to OOM DoS

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

The Grafana MSSQL data source plugin contains a logic flaw that allows a low-privileged user (Viewer) to bypass API restrictions and trigger a catastrophic Out-Of-Memory (OOM) memory exhaustion, crashing the host container.

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV

影響パッケージ

Bitnami grafana

[{"type":"SEMVER","events":[{"introduced":"11.6.0"},{"fixed":"11.6.14"},{"introduced":"12.1.0"},{"fixed":"12.1.10"},{"introduced":"12.2.0"},{"fixed":"12.2.8"},{"introduced":"12.3.0"},{"fixed":"12.3.6"},{"introduced":"12.4.0"},{"fixed":"12.4.2"}]}]

参照URL

advisory grafana.com
advisory nvd.nist.gov
advisory github.com