CVE-2018-19039

—

CVSS 3.0

6.5 medium

EPSS

7%p94

Published

Dec 13, 2018 (Dec 13, 2018)

Modified

Jun 17, 2026

Description

Grafana before 4.6.5 and 5.x before 5.3.3 allows remote authenticated users to read arbitrary files by leveraging Editor or Admin permissions.

Vendors: grafana redhat netapp
Products: grafana, ceph storage, enterprise linux desktop, enterprise linux server, enterprise linux workstation, active iq performance analytics services, storagegrid webscale nas bridge
Weakness: CWE-200
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (7.3%)

In the news0 stories

No ingested article mentions this CVE yet.