CVE-2024-21489 is a prototype pollution vulnerability in the uplot library component used by Grafana. Prototype pollution can allow an attacker to manipulate the prototype of base objects, potentially leading to unexpected behavior or security issues in applications using the affected library. Red Hat has released updated Grafana packages for Red Hat Enterprise Linux 8.4 variants to fix this vulnerability. The advisory references updated packages version 7.3.6-7.el8_4. No detailed CVSS score is provided in the advisory, but the vulnerability is classified as important/high severity by Red Hat Product Security.

The vulnerability could allow an attacker to perform prototype pollution attacks via the uplot component in Grafana, potentially leading to security issues such as application misbehavior or escalation of privileges within the affected environment. The exact impact details are not provided in the advisory. There are no known exploits in the wild currently.

Red Hat has released updated Grafana packages for Red Hat Enterprise Linux 8.4 to address this vulnerability. Users should apply the security update as described in the Red Hat advisory RHSA-2024:8083 and the update instructions at https://access.redhat.com/articles/11258. Applying this update will remediate the prototype pollution vulnerability in uplot. No additional mitigation steps are indicated by the vendor.