Linux · Security advisory · October 12, 2021

ELSA-2021-3771: grafana security update

ELSA-2021-3771, released October 12, 2021, fixes 1 CVE in grafana (version 0:7.3.6-3.el8_4). One of them is being exploited (CVE-2021-39226); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV
CVEs closed
1
None rated Critical
Exploited
1
CVE-2021-39226
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.9993
99th percentile

Fixed package versions

ProductReleaseFixed in
grafanaol 80:7.3.6-3.el8_4

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Patch now CVE-2021-39226 grafana: Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB 7.3 0.9993 KEVExploited
Showing 1 to 1 of 1 1