id: GO-2024-2629
modules:
    - module: github.com/grafana/grafana
      non_go_versions:
        - introduced: 8.5.0
        - fixed: 9.5.7
        - introduced: 10.0.0
        - fixed: 10.0.12
        - introduced: 10.1.0
        - fixed: 10.1.8
        - introduced: 10.2.0
        - fixed: 10.2.5
        - introduced: 10.3.0
        - fixed: 10.3.4
      vulnerable_at: 5.4.5+incompatible
summary: |-
    Grafana's users with permissions to create a data source can CRUD all data
    sources in github.com/grafana/grafana
cves:
    - CVE-2024-1442
ghsas:
    - GHSA-5mxf-42f5-j782
references:
    - advisory: https://github.com/advisories/GHSA-5mxf-42f5-j782
    - advisory: https://nvd.nist.gov/vuln/detail/CVE-2024-1442
    - web: https://grafana.com/security/security-advisories/cve-2024-1442
source:
    id: GHSA-5mxf-42f5-j782
    created: 2024-08-16T16:19:42.61183-04:00
review_status: UNREVIEWED