Number Summary Configuration item ID Exploit exists Cve id’s VIT3947537 Graphite Cross-Site Scripting and Arbitrary Code Execution Vulnerabilities il3tlgrafana01 QID-12942 Yes “CVE-2013-5943,CVE-2013-5942, CVE-2013-5093” VIT3947539 Web Server Uses Plain-Text Form Based Authentication il3tlgrafana0…

[image] srinivaseduru: CVE-2013-5943, these are for Graphite, are they not? And they look rather old…

it is for grafana, We want to upgrade grafana. Can you please provide step by step procedure or document if available

What is current version? On what OS or docker? Do you have sandbox where you can test this upgrade? Is it cloud or on prem? Enterprise or OSS

it goes without saying, I would never try an upgrade on the live stuff. That is why I asked you about sandbox, which interestingly you did not respond to :slight_smile: [image] Upgrade Grafana Guide for upgrading Grafana

we have test live grafana servers is there. Are we good to upgrade directly from version v7.5.6 to V8.x.x ?

1st read the upgrade path to v8 and understand the issues that an upgrade entails. But since it is a test server, only way to find out is to try the upgrade.

Mainly i want to upgrade Grafana to remediate LOG4J vulnerabilities. Kindly let us know at which version of grafana, We can remediate this vulnerabilities.

So your current version of grafana has that vulnerability?

[image] Grafana Labs core products not impacted by Log4j CVE-2021-44228 and related... After a rigorous review of our codebase in response to the Log4j RCE vulnerability, we are confident that Grafana OSS, Grafana Cloud, and our Enterprise products are not affected. …

Need remediation plan for Grafana vulnerabilities. Details given below

Grafana Alerting

yosiasz April 21, 2022, 12:27pm 17

Post an issue in the issues section of grafana github or contact support

Topic		Replies	Views
Logs4j CVE-2021-44228 Vulnerability Configuration	2	2225	December 15, 2021
Grafana 8.3.1, 8.2.7, 8.1.8 and 8.0.7 Security Update Security Announcements	0	978	December 9, 2021
Grafana 5.4.5 and 6.3.4 Security Update Security Announcements	0	6810	August 29, 2019
Grafana 7.0.2 and 6.7.4 Security Update Security Announcements	1	6847	June 3, 2020
Are older versions vulnerabilities patched? Installation	3	1184	August 9, 2019

Need remediation plan for Grafana vulnerabilities. Details given below

Related topics