Grafana is an open-source platform for monitoring and observability. The Grafana Alerting DingDing integration was not properly protected and could be exposed to users with Viewer permission. Fixed in versions 10.4.19+security-01, 11.2.10+security-01, 11.3.7+security-01, 11.4.5+security-01, 11.5.5+security-01, 11.6.2+security-01 and 12.0.1+security-01.
{ "nvd_published_at": "2025-07-17T11:15:22Z", "github_reviewed": true, "severity": "MODERATE", "github_reviewed_at": "2025-07-18T18:37:08Z", "cwe_ids": [ "CWE-200" ] }