Grafana MSSQL Data Source Plugin: Restriction Bypass Leading… (CVE-2026-33375)

Résumé

Grafana MSSQL Data Source Plugin: Restriction Bypass Leading to OOM DoS

Description d'origine

La description telle que publiée par la source (souvent en anglais).

The Grafana MSSQL data source plugin contains a logic flaw that allows a low-privileged user (Viewer) to bypass API restrictions and trigger a catastrophic Out-Of-Memory (OOM) memory exhaustion, crashing the host container.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Paquets affectés

Bitnami grafana

[{"type":"SEMVER","events":[{"introduced":"11.6.0"},{"fixed":"11.6.14"},{"introduced":"12.1.0"},{"fixed":"12.1.10"},{"introduced":"12.2.0"},{"fixed":"12.2.8"},{"introduced":"12.3.0"},{"fixed":"12.3.6"},{"introduced":"12.4.0"},{"fixed":"12.4.2"}]}]

Références

advisory grafana.com
advisory nvd.nist.gov
advisory github.com