CVE-2022-32276

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2022-06-17 · updated 2026-06-17
Weakness: CWE-287

Description

Grafana 8.4.3 allows unauthenticated access via (for example) a /dashboard/snapshot/*?orgId=0 URI. NOTE: the vendor considers this a UI bug, not a vulnerability

Affected products

Grafana: 8.4.3

References

https://github.com/BrotherOfJhonny/grafana/blob/main/README.md
https://github.com/grafana/grafana/issues/50336
https://github.com/BrotherOfJhonny/grafana/blob/main/README.md
https://github.com/grafana/grafana/issues/50336

Get alerted when CVE-2022-32276 or the next vulnerability affects your stack