CVE-2024-10452 LOW

CVE-2024-10452

Vendor Grafana
Product Grafana
Weakness CWE-639 · IDOR
Published October 29, 2024
Last update October 29, 2024
View on NVD All CVEs

CVSS base score

2.2/10
Attack vector Network
Attack complexity High
Privileges required High
User interaction None
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N

What the vulnerability does

01Description

Organization admins can delete pending invites created in an organization they are not part of.

Key dates

02Disclosure timeline

October 29, 2024 CVE published
October 29, 2024 Record updated