https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 07:39:32 +0000 https://vulnerability.circl.lu/vuln/cve-2025-3454 <p><strong>Affected:</strong> Grafana, Grafana Enterprise</p> <p>This vulnerability in Grafana&#39;s datasource proxy API allows authorization checks to be bypassed by adding an extra slash character in the URL path.</p> <p>Users with minimal permissions could gain unauthorized read access to GET endpoints in Alertmanager and Prometheus datasources.</p> <p>The issue primarily affects datasources that implement route-specific permissions, including Alertmanager and certain Prometheus-based datasources.</p> <p><strong>Affected:</strong> Grafana, Grafana Enterprise</p> <p>This vulnerability in Grafana&#39;s datasource proxy API allows authorization checks to be bypassed by adding an extra slash character in the URL path.</p> <p>Users with minimal permissions could gain unauthorized read access to GET endpoints in Alertmanager and Prometheus datasources.</p> <p>The issue primarily affects datasources that implement route-specific permissions, including Alertmanager and certain Prometheus-based datasources.</p> https://vulnerability.circl.lu/vuln/cve-2025-3454