Stargravy

**Name of the Vulnerable Software and Affected Versions** Grafana with Snowflake datasource plugin (affected versions not specified) **Description** The Snowflake datasource allows the use of GET and PUT commands. This enables any user with access to run queries against the data source to read and write arbitrary files between the local Grafana server and the connected Snowflake host. **Recommendations** Update the Snowflake datasource plugin. Restrict access to the datasource to minimize the risk of exploitation.

Name of the Vulnerable Software and Affected Versions Azure Databricks (affected versions not specified) Description Server-side request forgery (ssrf) in Azure Databricks allows an unauthorized attacker to elevate privileges over a network. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Purview (affected versions not specified) **Description** Server-side request forgery (ssrf) exists in Microsoft Purview, potentially allowing an unauthorized attacker to elevate privileges over a network. SSRF occurs when a server processes a request to retrieve a remote resource without properly validating the request, which can lead to unauthorized access to internal resources or external systems. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Purview (affected versions not specified) **Description** The software contains a server-side request forgery (ssrf) issue. This allows an unauthorized attacker to elevate privileges over a network. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Azure Databricks (affected versions not specified) Description: Improper access control in Azure Databricks can allow an unauthorized attacker to elevate privileges over a network. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.