CVE-2024-6322 | Grafana/Grafana Enterprise up to 11.1.0/11.1.2 plugin.json ReqActions privileges assignment

A vulnerability was found in Grafana and Grafana Enterprise up to 11.1.0/11.1.2. It has been declared as problematic. This vulnerability affects unknown code of the file plugin.json. The manipulation of the argument ReqActions leads to incorrect privilege assignment.

This vulnerability was named CVE-2024-6322. The attack can be initiated remotely. There is no exploit available.

It is recommended to upgrade the affected component.