CVE catalog

CVE-2022-31097

UBUNTU-CVE-2022-31097

[CVE catalog]

Severity
High · CVSS 7.3CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
Published
Updated
Source
[NVD] · [CVE record]
EPSS
70.06% · Oct 25, 2026

This update for grafana fixes the following issues: Updated to version 8.3.10 (jsc#SLE-24565, jsc#SLE-23422, jsc#SLE-23439): - CVE-2022-31097: Fixed XSS vulnerability in the Unified Alerting (bsc#1201535). - CVE-2022-31107: Fixed OAuth account takeover vulnerability (bsc#1201539). - CVE-2022-21702: Fixed XSS through attacker-controlled data source (bsc#1195726). - CVE-2022-21703: Fixed Cross Site Request Forgery (bsc#1195727). - CVE-2022-21713: Fixed Teams API IDOR (bsc#1195728).

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Susegrafanalinux enterprise module for package hub 15 sp48.3.10-150200.3.26.1fixed
Opensusegrafanaleap 15.38.3.10-150200.3.26.1fixed
Opensusegrafanaleap 15.48.3.10-150200.3.26.1fixed
Opensusegrafanatumbleweed8.3.10-1.1fixed
Susedracut-saltbootmanager client tools 150.1.1661440542.6cbe0da-150000.1.38.1fixed
Susegolang-github-lusitaniae-apache_exportermanager client tools 150.11.0-150000.1.12.1fixed
Susegrafanamanager client tools 158.3.10-150000.1.33.1fixed
Susemgr-daemonmanager client tools 154.3.6-150000.1.38.1fixed
Susespacecmdmanager client tools 154.3.15-150000.3.86.1fixed
Susespacewalk-client-toolsmanager client tools 154.3.12-150000.3.68.2fixed
Suseuyuni-common-libsmanager client tools 154.3.6-150000.1.27.2fixed
Susegolang-github-lusitaniae-apache_exportermanager proxy module 4.20.11.0-150000.1.12.1fixed
Susegolang-github-lusitaniae-apache_exportermanager proxy module 4.30.11.0-150000.1.12.1fixed
Susegolang-github-lusitaniae-apache_exportermanager server module 4.20.11.0-150000.1.12.1fixed
Susegolang-github-lusitaniae-apache_exportermanager server module 4.30.11.0-150000.1.12.1fixed
Susegolang-github-prometheus-node_exporterlinux enterprise high performance computing 15-espos1.3.0-150000.3.18.1fixed
Susegolang-github-prometheus-node_exporterlinux enterprise high performance computing 15-ltss1.3.0-150000.3.18.1fixed
Susegolang-github-prometheus-node_exporterlinux enterprise server 15-ltss1.3.0-150000.3.18.1fixed
Susegolang-github-prometheus-node_exporterlinux enterprise server for sap applications 151.3.0-150000.3.18.1fixed
Opensusedracut-saltbootleap 15.30.1.1661440542.6cbe0da-150000.1.38.1fixed
Opensusegolang-github-lusitaniae-apache_exporterleap 15.30.11.0-150000.1.12.1fixed
Opensusespacecmdleap 15.34.3.15-150000.3.86.1fixed
Opensusedracut-saltbootleap 15.40.1.1661440542.6cbe0da-150000.1.38.1fixed
Opensusegolang-github-lusitaniae-apache_exporterleap 15.40.11.0-150000.1.12.1fixed
Opensusespacecmdleap 15.44.3.15-150000.3.86.1fixed
Ubuntugrafana16.042.6.0+dfsg-1vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Susegrafanarpmlinux enterprise module for package hub 15 sp48.3.10-150200.3.26.1Not reportedSUSE-SU-2022:3765-1Not reported
Opensusegrafanarpmleap 15.38.3.10-150200.3.26.1Not reportedSUSE-SU-2022:3765-1Not reported
Opensusegrafanarpmleap 15.48.3.10-150200.3.26.1Not reportedSUSE-SU-2022:3765-1Not reported
Opensusegrafanarpmtumbleweed8.3.10-1.1Not reportedOPENSUSE-SU-2024:12260-1Not reported
Susedracut-saltbootrpmmanager client tools 150.1.1661440542.6cbe0da-150000.1.38.1Not reportedSUSE-SU-2022:3751-1Not reported
Susegolang-github-lusitaniae-apache_exporterrpmmanager client tools 150.11.0-150000.1.12.1Not reportedSUSE-SU-2022:3751-1Not reported
Susegrafanarpmmanager client tools 158.3.10-150000.1.33.1Not reportedSUSE-SU-2022:3751-1Not reported
Susemgr-daemonrpmmanager client tools 154.3.6-150000.1.38.1Not reportedSUSE-SU-2022:3751-1Not reported
Susespacecmdrpmmanager client tools 154.3.15-150000.3.86.1Not reportedSUSE-SU-2022:3751-1Not reported
Susespacewalk-client-toolsrpmmanager client tools 154.3.12-150000.3.68.2Not reportedSUSE-SU-2022:3751-1Not reported
Suseuyuni-common-libsrpmmanager client tools 154.3.6-150000.1.27.2Not reportedSUSE-SU-2022:3751-1Not reported
Susegolang-github-lusitaniae-apache_exporterrpmmanager proxy module 4.20.11.0-150000.1.12.1Not reportedSUSE-SU-2022:3751-1Not reported
Susegolang-github-lusitaniae-apache_exporterrpmmanager proxy module 4.30.11.0-150000.1.12.1Not reportedSUSE-SU-2022:3751-1Not reported
Susegolang-github-lusitaniae-apache_exporterrpmmanager server module 4.20.11.0-150000.1.12.1Not reportedSUSE-SU-2022:3751-1Not reported
Susegolang-github-lusitaniae-apache_exporterrpmmanager server module 4.30.11.0-150000.1.12.1Not reportedSUSE-SU-2022:3751-1Not reported
Susegolang-github-prometheus-node_exporterrpmlinux enterprise high performance computing 15-espos1.3.0-150000.3.18.1Not reportedSUSE-SU-2022:3751-1Not reported
Susegolang-github-prometheus-node_exporterrpmlinux enterprise high performance computing 15-ltss1.3.0-150000.3.18.1Not reportedSUSE-SU-2022:3751-1Not reported
Susegolang-github-prometheus-node_exporterrpmlinux enterprise server 15-ltss1.3.0-150000.3.18.1Not reportedSUSE-SU-2022:3751-1Not reported
Susegolang-github-prometheus-node_exporterrpmlinux enterprise server for sap applications 151.3.0-150000.3.18.1Not reportedSUSE-SU-2022:3751-1Not reported
Opensusedracut-saltbootrpmleap 15.30.1.1661440542.6cbe0da-150000.1.38.1Not reportedSUSE-SU-2022:3751-1Not reported
Opensusegolang-github-lusitaniae-apache_exporterrpmleap 15.30.11.0-150000.1.12.1Not reportedSUSE-SU-2022:3751-1Not reported
Opensusespacecmdrpmleap 15.34.3.15-150000.3.86.1Not reportedSUSE-SU-2022:3751-1Not reported
Opensusedracut-saltbootrpmleap 15.40.1.1661440542.6cbe0da-150000.1.38.1Not reportedSUSE-SU-2022:3751-1Not reported
Opensusegolang-github-lusitaniae-apache_exporterrpmleap 15.40.11.0-150000.1.12.1Not reportedSUSE-SU-2022:3751-1Not reported
Opensusespacecmdrpmleap 15.44.3.15-150000.3.86.1Not reportedSUSE-SU-2022:3751-1Not reported

OpenFactory catalog packages

[openSUSE Tumbleweed]

  • [grafana]Fixed

    Source package: [grafana]

    Details (1)

    • 12.4.5-4.1 · x86_64 · tumbleweed

      Fixed · Fixed: 8.3.10-1.1

      pypi · grafana · opensuse · tumbleweed

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]