CVE-2024-8986 - Grafana Plugin SDK: Insecure Embedding of Credentials in Binaries

CVE ID : CVE-2024-8986
Published : Sept. 19, 2024, 11:15 a.m. | 24 minutes ago
Description : The grafana plugin SDK bundles build metadata into the binaries it compiles; this metadata includes the repository URI for the plugin being built, as retrieved by running `git remote get-url origin`. If credentials are included in the repository URI (for instance, to allow for fetching of private dependencies), the final binary will contain the full URI, including said credentials.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...