CVE-2023-4399 (published 2023-10-17T07:09:03.015Z)
Grafana is an open-source platform for monitoring and observability. 

In Grafana Enterprise, Request security is a deny list that allows admins to configure Grafana in a way so that the instance doesn’t call specific hosts.

However, the restriction can be bypassed used punycode encoding of the characters in the request address.


Affected products: Vendor: Grafana
Product: Grafana Enterprise
Versions: 10.1.0, 10.0.0, 9.5.0, 9.4.0