CVEs-PoC/2021/CVE-2021-27962.md

CVE-2021-27962

Description

Grafana Enterprise 7.2.x and 7.3.x before 7.3.10 and 7.4.x before 7.4.5 allows a dashboard editor to bypass a permission check concerning a data source they should not be able to access.

POC

Reference

• https://community.grafana.com/t/grafana-enterprise-6-7-6-7-3-10-and-7-4-5-security-update/44724
• https://community.grafana.com/t/release-notes-v6-7-x/27119

Github

No PoCs found on GitHub currently.