CyberRota Analysis
AI-GeneratedGrafana versions prior to 13.2.0 are vulnerable to an authorization bypass that allows Editor-role users to delete protected contact points without the necessary permissions. This flaw can lead to unauthorized modifications of alert notification configurations, potentially disrupting alerting mechanisms. Organizations using Grafana, particularly those relying on alert notifications, should prioritize applying the necessary updates to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
An authorization bypass vulnerability in Grafana through 13.2.0 allows an Editor-role user to delete protected contact points (receivers) without the required alert.notifications.receivers.protected:write permission.