Threats tagged 'ghsa-jgwg-2rm4-8mgf'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	6.0	CVE-2026-79656A user with read access to Grafana's server logs, or to a log store they are shipped to, can recover the OAuth and Medium6.02026-10-28GCVE DatabaseCVE-2026-79656 A vulnerability in Grafana allows users with read access to server logs or log stores to recover OAuth and OIDC tokens for users authenticated via Generic OAuth, Google, or GitLab providers. This occurs because Grafana logs these tokens unredacted under certain conditions, such as invalid JWT tokens or missing ID tokens at debug level. The exposure is limited to the scopes granted to the OAuth client. Report on CVE-2026-79656 Vulnerability CWE-532 #ghsa-jgwg-2rm4-8mgf	GCVE Database	2026-10-28

Page 1 of 1