Threats tagged 'ghsa-97fx-j86f-w2rp'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.5	CVE-2026-110289A user with the Organization Admin role could point the server or token URL of a Git Sync connection at a loopback or Medium5.52026-11-11GCVE DatabaseCVE-2026-110289 A vulnerability in Grafana allows a user with the Organization Admin role to configure a Git Sync connection's server or token URL to a loopback or internal address. This misconfiguration causes Grafana to send sensitive OAuth client secrets, tokens, or GitHub App private key-signed requests to that internal address, resulting in a server-side request forgery (SSRF) vulnerability. Report on CVE-2026-110289 Vulnerability CWE-918 #ghsa-97fx-j86f-w2rp	GCVE Database	2026-11-11

Page 1 of 1