Threats tagged 'ghsa-qr52-42rj-4mw4'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.9	CVE-2026-103506Grafana can read SSO client secrets · Authenticated User High8.92026-10-28GCVE DatabaseCVE-2026-103506 An authenticated user in Grafana OSS and Enterprise 13.2 with the experimental kubernetesSsoSettingsApi feature enabled can read SSO client secrets and modify instance-wide SSO settings without proper authorization. This vulnerability arises from missing authorization checks. The feature toggle is disabled by default. Report on CVE-2026-103506 Vulnerability CWE-285 #ghsa-qr52-42rj-4mw4	GCVE Database	2026-10-28

Page 1 of 1