Threats tagged 'ghsa-frmg-qqp2-4cmv'

A vulnerability in Grafana versions before 13.0.4 and 13.1.1 allows users with the Editor role, who can create Git Sync provisioning jobs, to perform path traversal attacks. This enables deletion or movement of files outside the configured repository path on the local filesystem, potentially affecting files on the Grafana host.