Grafana Image Renderer is a Grafana backend plugin that handles rendering of panels & dashboards to PNGs using a headless browser (Chromium/Chrome). An internal security review identified an unauthorized file disclosure vulnerability. It is possible for a malicious user to retrieve unauthorized files under some network conditions or via a fake datasource (if user has admin permissions in Grafana). All Grafana installations should be upgraded to version 3.6.1 as soon as possible. As a workaround it is possible to [disable HTTP remote rendering](https://grafana.com/docs/grafana/latest/setup-grafana/configure-grafana/#plugingrafana-image-renderer).

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Grafana Image Renderer is a Grafana backend plugin that handles rendering of panels & dashboards to PNGs
    using a headless browser (Chromium/Chrome). An internal security review identified an unauthorized file
    disclosure vulnerability. It is possible for a malicious user to retrieve unauthorized files under some
    network conditions or via a fake datasource (if user has admin permissions in Grafana). All Grafana
    installations should be upgraded to version 3.6.1 as soon as possible. As a workaround it is possible to
    [disable HTTP remote rendering](https://grafana.com/docs/grafana/latest/setup-grafana/configure-
    grafana/#plugingrafana-image-renderer). (CVE-2022-31176)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 827b95ff-290e-11ed-a2e7-6c3be5272acd advisory.

  - Grafana Labs reports: On July 21, an internal security review identified an unauthorized file disclosure     vulnerability in the Grafana Image Renderer plugin when HTTP remote rendering is used. The Chromium     browser embedded in the Grafana Image Renderer allows for printing of unauthorized files in a PNG file.
    This makes it possible for a malicious user to retrieve unauthorized files under some network conditions     or via a fake data source (this applies if the user has admin permissions in Grafana). (CVE-2022-31176)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
404810	Alpine: multiple grafana packages: security update to 9.1.2-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
404810	Alpine: multiple grafana packages: security update to 9.1.2-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
404805	Alpine: multiple grafana packages: security update to 8.5.11-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
404805	Alpine: multiple grafana packages: security update to 8.5.11-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
164622	FreeBSD : Grafana -- Unauthorized file disclosure (827b95ff-290e-11ed-a2e7-6c3be5272acd)	Nessus	FreeBSD Local Security Checks	high

Detections

Analytics

CVE-2022-31176

high

Tenable Plugins

high

high

high

high

high