漏洞描述
Grafana 6.7.3 through 7.4.1 snapshot functionality can allow an unauthenticated remote attacker to trigger a Denial of Service via a remote API call if a commonly used configuration is set.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
phabricator.wikimedia.orghttps://phabricator.wikimedia.org/T274736↗grafana.comhttps://grafana.com/docs/grafana/latest/release-notes/release-notes-7-4-2/↗nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2021-27358↗github.comhttps://github.com/grafana/grafana/blob/master/CHANGELOG.md↗github.comhttps://github.com/grafana/grafana/blob/master/CHANGELOG.md#742-2021-02-17↗