What is CVE-2024-8118?

CVE-2024-8118 is a vulnerability in Grafana, classified under CWE-653. Published 2024-09-26.

Is CVE-2024-8118 known to be exploited?

3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Grafana

CVE-2024-8118

In Grafana, the wrong permission is applied to the alert rule write API endpoint, allowing users with permission to write external alert instances to also write alert rules.

EPSS: 0.006 (44.4th percentile) — read the EPSS interpretation.

Affected products

Grafana — versions 8.5.0, 10.4.0, 11.0.0

Weakness classification (CWE)

CWE-653

Public proof-of-concept exploits

nurarifin05/POC-CVE-2024-8118
nomi-sec/PoC-in-GitHub
zulloper/cve-poc

References

security@grafana.com

Frequently asked questions

What is CVE-2024-8118?: CVE-2024-8118 is a vulnerability in Grafana, classified under CWE-653. Published 2024-09-26.
Is CVE-2024-8118 known to be exploited?: 3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.