AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2021-28148

HIGH · CVSS 7.5 EPSS 3.50%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2021-03-22 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2021-28148
Severity
HIGH
CVSS
7.5
EPSS
3.50%

Original NVD Description

One of the usage insights HTTP API endpoints in Grafana Enterprise 6.x before 6.7.6, 7.x before 7.3.10, and 7.4.x before 7.4.5 is accessible without any authentication. This allows any unauthenticated user to send an unlimited number of requests to the endpoint, leading to a denial of service (DoS) attack against a Grafana Enterprise instance.