0xdevshm@0xdevshm
Grafana v13.2.3 is out. - Security: Fix CVE-2026-13719 - Security: Fix CVE-2026-13720 https://github.com/grafana/grafana/releases/tag/v13.2.3 #grafana #release #programming
0000025
130 followersView on X
CVE-2026-13719
LOWCVSS 4.3 · MEDIUMSignal is active with 1 mentions in latest observed window
Immediate actions
- Track advisory updates for patch or workaround availability
Recommended action window: Monitor and triage in normal cycle
NVD description
An authenticated user can list alert rules stored in folders they are not allowed to read through the alert rules API list endpoint. When the set of folders the user may read was empty, the folder restriction was dropped and every alert rule in the organization was returned. From Grafana 13.1.0, any user can trigger this with a folder filter. The exposed data is rule configuration; data source credentials are not exposed.
0.0/ 10 priority
Sources & remediation
Other references
Weakness type (CWE)
CWE-200CWE-863
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
Threat summary
- 1 mentions across 1 observed day
What's happening
- 1 total mentions across 1 day