Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2023-4457

Good to know:

icon

Date: October 16, 2023

Grafana is an open-source platform for monitoring and observability. The Google Sheets data source plugin for Grafana, versions 0.9.0 to 1.2.2 are vulnerable to an information disclosure vulnerability. The plugin did not properly sanitize error messages, making it potentially expose the Google Sheet API-key that is configured for the data source. This vulnerability was fixed in version 1.2.2.

Language: Go

Severity Score

Related Resources (5)

https://grafana.com/security/security-advisories/cve-2023-4457
https://nvd.nist.gov/vuln/detail/CVE-2023-4457
https://grafana.com/security/security-advisories/cve-2023-4457/
https://github.com/grafana/google-sheets-datasource
https://www.mend.io/vulnerability-database/CVE-2023-4457

Severity Score

Weakness Type (CWE)

Generation of Error Message Containing Sensitive Information

CWE-209

Top Fix

icon

Upgrade Version

Upgrade to version v1.2.2

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): HIGH
User Interaction (UI): NONE
Scope (S): CHANGED
Confidentiality (C): LOW
Integrity (I): LOW
Availability (A): NONE

Do you need more information?

Contact Us