CVE-2022-23498

Name of the Vulnerable Software and Affected Versions Grafana versions prior to 9.2.10 Grafana versions prior to 9.3.4

Description The issue is related to the caching of datasource queries in Grafana, which includes caching of the grafana session header. This allows any user querying a datasource with caching enabled to potentially acquire another user's session.

Recommendations For versions prior to 9.2.10, disable datasource query caching for all datasources as a mitigation measure. For versions prior to 9.3.4, disable datasource query caching for all datasources as a mitigation measure. As a temporary workaround, consider disabling the datasource query caching for all datasources until a patch is available.