0-day Cross Origin Request Forgery vulnerability in Grafana 8.x .
该报告还没有中文解读。
原文摘录
摘自原文（10007 字符中的一小部分）
To triage, please note that this is still a 0-day that was alerted to Grafana already, in order to make sure the client is safe I report this issue now, please make sure to not spread it further or leak it, as the best interest is to let you be aware and safer from any potential attacks in the …
原文中的代码
allow_embedding cookie_samesite --> none
默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 Aiven Ltd 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @abrahack · 版权归作者与 Aiven Ltd 所有