CVE-2024-8986
Information Leakage in grafana-plugin-sdk-go
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Information Leakage in grafana-plugin-sdk-go
The grafana plugin SDK bundles build metadata into the binaries it compiles; this metadata includes the repository URI for the plugin being built, as retrieved by running `git remote get-url origin`. If credentials are included in the repository URI (for instance, to allow for fetching of private dependencies), the final binary will contain the full URI, including said credentials.
Reserved 2024-09-18 | Published 2024-09-19 | Updated 2024-09-19 | Assigner GRAFANACWE-522 Insufficiently Protected Credentials
grafana.com/security/security-advisories/cve-2024-8986/
Support options
