https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 05:35:01 +0000 https://vulnerability.circl.lu/vuln/cve-2022-39229 <p><strong>Affected:</strong> grafana</p> <p>Grafana is an open source data visualization platform for metrics, logs, and traces. Versions prior to 9.1.8 and 8.5.14 allow one user to block another user&#39;s login attempt by registering someone else&#39;e email address as a username. A Grafana user’s username and email address are unique fields, that means no other user can have the same username or email address as another user. A user can have an email address as a username. However, the login system allows users to log in with either username or email address. Since Grafana allows a user to log in with either their username or email address, this creates an usual behavior where `user_1` can register with one email address and `user_2` can register their username as `user_1`’s email address. This prevents `user_1` logging into the application since `user_1`&#39;s password won’t match with `user_2`&#39;s email address. Versions 9.1.8 and 8.5.14 contain a patch. There are no workarounds for this issue.</p> <p><strong>Affected:</strong> grafana</p> <p>Grafana is an open source data visualization platform for metrics, logs, and traces. Versions prior to 9.1.8 and 8.5.14 allow one user to block another user&#39;s login attempt by registering someone else&#39;e email address as a username. A Grafana user’s username and email address are unique fields, that means no other user can have the same username or email address as another user. A user can have an email address as a username. However, the login system allows users to log in with either username or email address. Since Grafana allows a user to log in with either their username or email address, this creates an usual behavior where `user_1` can register with one email address and `user_2` can register their username as `user_1`’s email address. This prevents `user_1` logging into the application since `user_1`&#39;s password won’t match with `user_2`&#39;s email address. Versions 9.1.8 and 8.5.14 contain a patch. There are no workarounds for this issue.</p> https://vulnerability.circl.lu/vuln/cve-2022-39229