Affected by GO-2022-0342 and 33 other vulnerabilities

GO-2022-0342: Grafana XSS in Dashboard Text Panel in github.com/grafana/grafana

GO-2022-0707: Grafana Authentication Bypass in github.com/grafana/grafana

GO-2024-2483: Grafana XSS via adding a link in General feature in github.com/grafana/grafana

GO-2024-2510: Grafana Cross-site Scripting (XSS) in github.com/grafana/grafana

GO-2024-2513: Grafana information disclosure in github.com/grafana/grafana

GO-2024-2515: Grafana XSS via the OpenTSDB datasource in github.com/grafana/grafana

GO-2024-2516: Grafana XSS via a column style in github.com/grafana/grafana

GO-2024-2517: Grafana XSS in header column rename in github.com/grafana/grafana

GO-2024-2519: Grafana world readable configuration files in github.com/grafana/grafana

GO-2024-2520: Grafana XSS via a query alias for the ElasticSearch datasource in github.com/grafana/grafana

GO-2024-2523: Grafana stored XSS in github.com/grafana/grafana

GO-2024-2629: Grafana's users with permissions to create a data source can CRUD all data sources in github.com/grafana/grafana

GO-2024-2661: Arbitrary file read in github.com/grafana/grafana

GO-2024-2697: Grafana: Users outside an organization can delete a snapshot with its key in github.com/grafana/grafana

GO-2024-2843: Grafana Email addresses and usernames can not be trusted in github.com/grafana/grafana

GO-2024-2844: Grafana User enumeration via forget password in github.com/grafana/grafana

GO-2024-2847: Grafana Escalation from admin to server admin when auth proxy is used in github.com/grafana/grafana

GO-2024-2848: Grafana when using email as a username can block other users from signing in in github.com/grafana/grafana

GO-2024-2851: Grafana Data source and plugin proxy endpoints leaking authentication tokens to some destination plugins in github.com/grafana/grafana

GO-2024-2852: Grafana account takeover via OAuth vulnerability in github.com/grafana/grafana

GO-2024-2854: Grafana folders admin only permission privilege escalation in github.com/grafana/grafana

GO-2024-2855: Grafana Plugin signature bypass in github.com/grafana/grafana

GO-2024-2856: Grafana Race condition allowing privilege escalation in github.com/grafana/grafana

GO-2024-2857: Grafana Stored Cross-site Scripting in Unified Alerting in github.com/grafana/grafana

GO-2024-2867: Grafana Spoofing originalUrl of snapshots in github.com/grafana/grafana

GO-2024-3079: Grafana plugin data sources vulnerable to access control bypass in github.com/grafana/grafana

GO-2024-3215: Grafana Command Injection And Local File Inclusion Via Sql Expressions in github.com/grafana/grafana

GO-2024-3240: Grafana org admin can delete pending invites in different org in github.com/grafana/grafana

GO-2025-3438: Grafana Alerting VictorOps integration could be exposed to users with Viewer permission in github.com/grafana/grafana

GO-2025-3704: Grafana Cross-Site-Scripting (XSS) via custom loaded frontend plugin in github.com/grafana/grafana

GO-2025-3740: Grafana vulnerable to authenticated users bypassing dashboard, folder permissions in github.com/grafana/grafana

GO-2025-3742: Grafana's datasource proxy API allows authorization checks to be bypassed in github.com/grafana/grafana

GO-2025-3814: Grafana's insecure DingDing Alert integration exposes sensitive information in github.com/grafana/grafana

GO-2025-3817: Grafana is vulnerable to XSS attacks through open redirects and path traversal in github.com/grafana/grafana

modules

package

v0.0.0-testrgm6 Latest Latest Go to latest Published: Jul 24, 2023 License: AGPL-3.0 Imports: 10 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/grafana/grafana

Links

Open Source Insights

Documentation ¶

Index ¶

Constants
Variables
func ProvideService(cfg *setting.Cfg, features *featuremgmt.FeatureManager) *service
type Engine
type Manager
type MockModuleEngine
type MockModuleManager
- func (m *MockModuleManager) RegisterInvisibleModule(name string, initFn func() (services.Service, error))
- func (m *MockModuleManager) RegisterModule(name string, initFn func() (services.Service, error))
type MockNamedService
- func NewMockNamedService(name string) *MockNamedService

Constants ¶

View Source

const (
	// All includes all modules necessary for Grafana to run as a standalone application.
	All string = "all"
	// BackgroundServices includes all Grafana services that run in the background
	BackgroundServices string = "background-services"
	// CertGenerator generates certificates for grafana-apiserver
	CertGenerator string = "cert-generator"
	// GrafanaAPIServer is the Kubertenes API server for Grafana Resources
	GrafanaAPIServer string = "grafana-apiserver"
	// HTTPServer is the HTTP server for Grafana
	HTTPServer string = "http-server"
	// Provisioning sets up Grafana with preconfigured datasources, dashboards, etc.
	Provisioning string = "provisioning"
	// SecretMigrator handles legacy secrets migrations
	SecretMigrator string = "secret-migrator"
)

Variables ¶

View Source

var WireSet = wire.NewSet(
	ProvideService,
	wire.Bind(new(Engine), new(*service)),
	wire.Bind(new(Manager), new(*service)),
)

Functions ¶

func ProvideService ¶

func ProvideService(
	cfg *setting.Cfg,
	features *featuremgmt.FeatureManager,
) *service

Types ¶

type Engine ¶

type Engine interface {
	AwaitHealthy(context.Context) error
	Init(context.Context) error
	Run(context.Context) error
	Shutdown(context.Context) error
}

type Manager ¶

type Manager interface {
	RegisterModule(name string, initFn func() (services.Service, error))
	RegisterInvisibleModule(name string, initFn func() (services.Service, error))
}

type MockModuleEngine ¶

type MockModuleEngine struct {
	AwaitHealthyFunc func(context.Context) error
	InitFunc         func(context.Context) error
	RunFunc          func(context.Context) error
	ShutdownFunc     func(context.Context) error
}

func (*MockModuleEngine) AwaitHealthy ¶

func (m *MockModuleEngine) AwaitHealthy(ctx context.Context) error

func (*MockModuleEngine) Init ¶

func (m *MockModuleEngine) Init(ctx context.Context) error

func (*MockModuleEngine) Run ¶

func (m *MockModuleEngine) Run(ctx context.Context) error

func (*MockModuleEngine) Shutdown ¶

func (m *MockModuleEngine) Shutdown(ctx context.Context) error

type MockModuleManager ¶

type MockModuleManager struct {
	RegisterModuleFunc          func(name string, initFn func() (services.Service, error))
	RegisterInvisibleModuleFunc func(name string, initFn func() (services.Service, error))
}

func (*MockModuleManager) RegisterInvisibleModule ¶

func (m *MockModuleManager) RegisterInvisibleModule(name string, initFn func() (services.Service, error))

func (*MockModuleManager) RegisterModule ¶

func (m *MockModuleManager) RegisterModule(name string, initFn func() (services.Service, error))

type MockNamedService ¶

type MockNamedService struct {
	*services.BasicService
}

func NewMockNamedService ¶

func NewMockNamedService(name string) *MockNamedService

Source Files ¶

View all Source files

Directories ¶

Path	Synopsis
registry

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL