# CVE-2020-13379: grafana-cloudwatch: Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB

CVE-2020-13379 is fixed in 13 products on 1 platform, first by RHSA-2020:2641, released June 22, 2020. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2020-13379
- Priority: High
- CVSS: 8.2 (Important)
- EPSS: 0.9986
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Jun 22, 2020

## Description

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB.   Security Fix(es):  * grafana: SSRF incorrect access control vulnerability allows unauthenticated users to make grafana send HTTP requests to any URL (CVE-2020-13379)  For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | grafana RHEL 8 | 0:6.3.6-2.el8_2 | [RHSA-2020:2641](https://patchblox.com/security/data/fix/linux/rhsa-2020-2641.md) | Jun 22, 2020 |
| Linux | grafana ol 8 | 0:6.3.6-2.el8_2 | [ELSA-2020-2641](https://patchblox.com/security/data/fix/linux/elsa-2020-2641.md) | Jun 22, 2020 |
| Linux | grafana-azure-monitor RHEL 8 | 0:6.3.6-2.el8_2 | [RHSA-2020:2641](https://patchblox.com/security/data/fix/linux/rhsa-2020-2641.md) | Jun 22, 2020 |
| Linux | grafana-azure-monitor ol 8 | 0:6.3.6-2.el8_2 | [ELSA-2020-2641](https://patchblox.com/security/data/fix/linux/elsa-2020-2641.md) | Jun 22, 2020 |
| Linux | grafana-cloudwatch RHEL 8 | 0:6.3.6-2.el8_2 | [RHSA-2020:2641](https://patchblox.com/security/data/fix/linux/rhsa-2020-2641.md) | Jun 22, 2020 |
| Linux | grafana-cloudwatch ol 8 | 0:6.3.6-2.el8_2 | [ELSA-2020-2641](https://patchblox.com/security/data/fix/linux/elsa-2020-2641.md) | Jun 22, 2020 |
| Linux | grafana-elasticsearch RHEL 8 | 0:6.3.6-2.el8_2 | [RHSA-2020:2641](https://patchblox.com/security/data/fix/linux/rhsa-2020-2641.md) | Jun 22, 2020 |
| Linux | grafana-elasticsearch ol 8 | 0:6.3.6-2.el8_2 | [ELSA-2020-2641](https://patchblox.com/security/data/fix/linux/elsa-2020-2641.md) | Jun 22, 2020 |
| Linux | grafana-graphite RHEL 8 | 0:6.3.6-2.el8_2 | [RHSA-2020:2641](https://patchblox.com/security/data/fix/linux/rhsa-2020-2641.md) | Jun 22, 2020 |
| Linux | grafana-graphite ol 8 | 0:6.3.6-2.el8_2 | [ELSA-2020-2641](https://patchblox.com/security/data/fix/linux/elsa-2020-2641.md) | Jun 22, 2020 |
| Linux | grafana-influxdb RHEL 8 | 0:6.3.6-2.el8_2 | [RHSA-2020:2641](https://patchblox.com/security/data/fix/linux/rhsa-2020-2641.md) | Jun 22, 2020 |
| Linux | grafana-influxdb ol 8 | 0:6.3.6-2.el8_2 | [ELSA-2020-2641](https://patchblox.com/security/data/fix/linux/elsa-2020-2641.md) | Jun 22, 2020 |
| Linux | grafana-loki RHEL 8 | 0:6.3.6-2.el8_2 | [RHSA-2020:2641](https://patchblox.com/security/data/fix/linux/rhsa-2020-2641.md) | Jun 22, 2020 |
| Linux | grafana-loki ol 8 | 0:6.3.6-2.el8_2 | [ELSA-2020-2641](https://patchblox.com/security/data/fix/linux/elsa-2020-2641.md) | Jun 22, 2020 |
| Linux | grafana-mssql RHEL 8 | 0:6.3.6-2.el8_2 | [RHSA-2020:2641](https://patchblox.com/security/data/fix/linux/rhsa-2020-2641.md) | Jun 22, 2020 |
| Linux | grafana-mssql ol 8 | 0:6.3.6-2.el8_2 | [ELSA-2020-2641](https://patchblox.com/security/data/fix/linux/elsa-2020-2641.md) | Jun 22, 2020 |
| Linux | grafana-mysql RHEL 8 | 0:6.3.6-2.el8_2 | [RHSA-2020:2641](https://patchblox.com/security/data/fix/linux/rhsa-2020-2641.md) | Jun 22, 2020 |
| Linux | grafana-mysql ol 8 | 0:6.3.6-2.el8_2 | [ELSA-2020-2641](https://patchblox.com/security/data/fix/linux/elsa-2020-2641.md) | Jun 22, 2020 |
| Linux | grafana-opentsdb RHEL 8 | 0:6.3.6-2.el8_2 | [RHSA-2020:2641](https://patchblox.com/security/data/fix/linux/rhsa-2020-2641.md) | Jun 22, 2020 |
| Linux | grafana-opentsdb ol 8 | 0:6.3.6-2.el8_2 | [ELSA-2020-2641](https://patchblox.com/security/data/fix/linux/elsa-2020-2641.md) | Jun 22, 2020 |
| Linux | grafana-postgres RHEL 8 | 0:6.3.6-2.el8_2 | [RHSA-2020:2641](https://patchblox.com/security/data/fix/linux/rhsa-2020-2641.md) | Jun 22, 2020 |
| Linux | grafana-postgres ol 8 | 0:6.3.6-2.el8_2 | [ELSA-2020-2641](https://patchblox.com/security/data/fix/linux/elsa-2020-2641.md) | Jun 22, 2020 |
| Linux | grafana-prometheus RHEL 8 | 0:6.3.6-2.el8_2 | [RHSA-2020:2641](https://patchblox.com/security/data/fix/linux/rhsa-2020-2641.md) | Jun 22, 2020 |
| Linux | grafana-prometheus ol 8 | 0:6.3.6-2.el8_2 | [ELSA-2020-2641](https://patchblox.com/security/data/fix/linux/elsa-2020-2641.md) | Jun 22, 2020 |
| Linux | grafana-stackdriver RHEL 8 | 0:6.3.6-2.el8_2 | [RHSA-2020:2641](https://patchblox.com/security/data/fix/linux/rhsa-2020-2641.md) | Jun 22, 2020 |
| Linux | grafana-stackdriver ol 8 | 0:6.3.6-2.el8_2 | [ELSA-2020-2641](https://patchblox.com/security/data/fix/linux/elsa-2020-2641.md) | Jun 22, 2020 |

---

Data as of 2026-11-08T13:06:02Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.