2322479 – (CVE-2024-10452) CVE-2024-10452 grafana: Org admin can delete pending invites in different org

Bug 2322479 (CVE-2024-10452) - CVE-2024-10452 grafana: Org admin can delete pending invites in different org

Summary: CVE-2024-10452 grafana: Org admin can delete pending invites in different org

Keywords:
Status:	NEW
Alias:	CVE-2024-10452
Product:	Security Response
Classification:	Other
Component:	vulnerability
Sub Component:
Version:	unspecified
Hardware:	All
OS:	Linux
Priority:	low
Severity:	low
Target Milestone:	---
Assignee:	Product Security DevOps Team
QA Contact:
Docs Contact:
URL:
Whiteboard:
Depends On:	2322505 2322506
Blocks:
TreeView+	depends on / blocked

Attachments	(Terms of Use)

Description OSIDB Bzimport 2024-10-29 16:00:59 UTC

Organization admins can delete pending invites created in an organization they are not part of.

Note You need to log in before you can comment on or make changes to this bug.