A vulnerability in Grafana allows a user with the Viewer role to crash the server by submitting a specially crafted server-side math expression that causes uncontrolled recursion. If a user has permission to provision alert rules, they can make the outage persist even after server restarts.