CVE-2023-4822

Summary

CVE-2023-4822 is a newly discovered vulnerability affecting Grafana, an open-source platform for monitoring and observability. This issue grants Organization Admin permissions to any user in an organization who already holds the role of Organization Admin or higher in another organization. The vulnerability extends beyond the affected organization, enabling the admin to modify permissions for Organization Viewer, Organization Editor, and Organization Admin roles, as well as assign or revoke any global permissions for any user. This poses a significant risk to the security and integrity of the affected Grafana instances. It is essential for organizations using Grafana to apply the necessary patches as soon as possible to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.