← Database

CVE-2026-28383

MEDIUM CVSS: 6.5 Published: 2026-05-13 Modified: 2026-06-17

Description

A request to the Grafana plugin resources endpoint can cause unbounded memory allocation by reading the entire request body into memory. An authenticated user can exploit this to trigger an out-of-memory condition, potentially causing a denial of service.

Affected Platforms

Grafana Grafana

Weakness Type

CWE-770

References