CVE-2021-27962: Grafana

High severity, CVSS 7.1. EPSS: 2.1% chance of exploitation in the next 30 days.

Grafana Enterprise 7.2.x and 7.3.x before 7.3.10 and 7.4.x before 7.4.5 allows a dashboard editor to bypass a permission check concerning a data source they should not be able to access.

Affected products

• Grafana Grafana: from 7.2.0, before 7.3.10 (fixed in 7.3.10); from 7.4.0, before 7.4.5 (fixed in 7.4.5)

Published 2021-03-22. Last modified 2026-06-17.