Test ID:	1.3.6.1.4.1.25623.1.0.148470
Category:	Web application abuses
Title:	Grafana OAuth Vulnerability (GHSA-mx47-6497-3fv2)
Summary:	Grafana is prone to a vulnerability in OAuth.
Description:	Summary: Grafana is prone to a vulnerability in OAuth. Vulnerability Impact: It is possible for a malicious user who has authorization to log into a Grafana instance via a configured OAuth IdP to take over an existing Grafana account under some conditions. Affected Software/OS: Grafana version 5.3 through 8.3.9, 8.4.x through 8.4.9, 8.5.x through 8.5.8 and 9.x through 9.0.2. Solution: Update to version 8.3.10, 8.4.10, 8.5.9, 9.0.3 or later. CVSS Score: 7.1 CVSS Vector: AV:N/AC:H/Au:S/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2022-31107 https://github.com/grafana/grafana/security/advisories/GHSA-mx47-6497-3fv2 https://grafana.com/docs/grafana/next/release-notes/release-notes-8-4-10/ https://grafana.com/docs/grafana/next/release-notes/release-notes-8-5-9/ https://grafana.com/docs/grafana/next/release-notes/release-notes-9-0-3/
Copyright	Copyright (C) 2022 Greenbone Networks GmbH

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.