CVE-2020-13379: SSRF
An SSRF incorrect access control vulnerability was found in Grafana regarding the avatar feature, allowing any unauthenticated user or client to make Grafana send HTTP requests to any URL and then return its result to the user or client. Additionally, the same issue can create a NULL pointer dereference vulnerability. This flaw allows an attacker to gain information about the network that Grafana is running on, or cause a segmentation fault, resulting in a denial of service.
Other sources
An SSRF incorrect access control vulnerability was found in Grafana regarding the avatar feature, allowing any unauthenticated user/client to make Grafana send HTTP requests to any URL and return its result to the user/client. This can be used to gain information about the network that Grafana is running on.
Reference: https://grafana.com/blog/2020/06/03/grafana-6.7.4-and-7.0.2-released-with-important-security-fix/
— Red Hat
The avatar feature in Grafana (github.com/grafana/grafana/pkg/api/avatar) 3.0.1 through 7.0.1 has an SSRF Incorrect Access Control issue that allows remote code execution. This vulnerability allows any unauthenticated user/client to make Grafana send HTTP requests to any URL and return its result to the user/client. This can be used to gain information about the network that Grafana is running on.
The avatar feature in Grafana 3.0.1 through 7.0.1 has an SSRF Incorrect Access Control issue. This vulnerability allows any unauthenticated user/client to make Grafana send HTTP requests to any URL and return its result to the user/client. This can be used to gain information about the network that Grafana is running on. Furthermore, passing invalid URL objects could be used for DOS'ing Grafana via SegFault.
Affected Software
Remediation
Information
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is CVE-2020-13379?
CVE-2020-13379 is an SSRF incorrect access control vulnerability in Grafana.
Who is affected by CVE-2020-13379?
Any unauthenticated user or client using Grafana versions 3.0.1 through 7.0.1 is affected by CVE-2020-13379.
What is the severity of CVE-2020-13379?
CVE-2020-13379 has a severity rating of 8.2 (high).
How can I fix CVE-2020-13379?
To fix CVE-2020-13379, upgrade to Grafana version 6.7.4 or 7.0.2 which include the necessary security fix.
Where can I find more information about CVE-2020-13379?
You can find more information about CVE-2020-13379 on the CVE website, NIST's vulnerability database, Grafana's blog, and Red Hat's Bugzilla and errata pages using the provided references.