« Volver al listado

CVE-2023-1387

Estado: ModificadaAlta (7.5)—

Grafana is an open-source platform for monitoring and observability.

Starting with the 9.1 branch, Grafana introduced the ability to search for a JWT in the URL query parameter auth_token and use it as the authentication token.

By enabling the "url_login" configuration option (disabled by default), a JWT might be sent to data sources. If an attacker has access to the data source, the leaked token could be used to authenticate to Grafana.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Grafana — Grafana

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2023-1387",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2023-1387",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-01-31T16:11:53.656123Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security@grafana.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 4.2,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "REQUIRED",
          "attackComplexity": "HIGH",
          "availabilityImpact": "NONE",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 0.5
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "security@grafana.com",
      "affectedData": [
        {
          "vendor": "Grafana",
          "product": "Grafana",
          "versions": [
            {
              "status": "affected",
              "version": "9.1.0",
              "lessThan": "9.2.17",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "9.3.0",
              "lessThan": "9.3.13",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "9.4.0",
              "lessThan": "9.5.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "vendor": "Grafana",
          "product": "Grafana Enterprise",
          "versions": [
            {
              "status": "affected",
              "version": "9.1.0",
              "lessThan": "9.2.17",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "9.3.0",
              "lessThan": "9.3.13",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "9.4.0",
              "lessThan": "9.5.0",
              "versionType": "semver"
            }
          ]
        }
      ]
    }
  ],
  "published": "2023-04-26T14:15:09.430",
  "references": [
    {
      "url": "https://github.com/grafana/bugbounty/security/advisories/GHSA-5585-m9r5-p86j",
      "tags": [
        "Exploit",
        "Vendor Advisory"
      ],
      "source": "security@grafana.com"
    },
    {
      "url": "https://grafana.com/security/security-advisories/cve-2023-1387/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "security@grafana.com"
    },
    {
      "url": "https://security.netapp.com/advisory/ntap-20230609-0003/",
      "source": "security@grafana.com"
    },
    {
      "url": "https://github.com/grafana/bugbounty/security/advisories/GHSA-5585-m9r5-p86j",
      "tags": [
        "Exploit",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://grafana.com/security/security-advisories/cve-2023-1387/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://security.netapp.com/advisory/ntap-20230609-0003/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security@grafana.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Grafana is an open-source platform for monitoring and observability. \n\nStarting with the 9.1 branch, Grafana introduced the ability to search for a JWT in the URL query parameter auth_token and use it as the authentication token. \n\nBy enabling the \"url_login\" configuration option (disabled by default), a JWT might be sent to data sources. If an attacker has access to the data source, the leaked token could be used to authenticate to Grafana."
    }
  ],
  "lastModified": "2026-06-17T05:27:50.430",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:grafana:grafana:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5664FC02-E4AA-41EC-8EAA-300AD2272CC2",
              "versionEndExcluding": "9.2.17",
              "versionStartIncluding": "9.1.0"
            },
            {
              "criteria": "cpe:2.3:a:grafana:grafana:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5A544263-545D-4D86-B29F-F7FC12E9A34F",
              "versionEndExcluding": "9.3.13",
              "versionStartIncluding": "9.3.0"
            },
            {
              "criteria": "cpe:2.3:a:grafana:grafana:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "99EBCA47-A3CD-4C20-B151-300D43426EB2",
              "versionEndExcluding": "9.4.9",
              "versionStartIncluding": "9.4.0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security@grafana.com"
}