update affected version ranges for CVE-2024-10452

Signed-off-by: Weston Steimel <[email protected]>
anchore · Dec 18, 2024 · 03f6923 · 03f6923
1 parent 0fd068d
commit 03f6923
Showing 1 changed file with 47 additions and 6 deletions.
diff --git a/data/anchore/2024/CVE-2024-10452.json b/data/anchore/2024/CVE-2024-10452.json
@@ -3,13 +3,9 @@
     "cna": "grafana",
     "cveId": "CVE-2024-10452",
     "description": "Organization admins can delete pending invites created in an organization they are not part of.",
-    "needsReview": true,
     "reason": "Added CPE configurations because not yet analyzed by NVD.",
     "references": [
       "https://grafana.com/security/security-advisories/cve-2024-10452"
-    ],
-    "toDos": [
-      "Monitor for any details"
     ]
   },
   "adp": {
@@ -26,8 +22,33 @@
         "vendor": "Grafana",
         "versions": [
           {
+            "lessThan": "10.4.13",
+            "status": "affected",
+            "version": "0",
+            "versionType": "custom"
+          },
+          {
+            "lessThan": "11.0.8",
+            "status": "affected",
+            "version": "11.0",
+            "versionType": "custom"
+          },
+          {
+            "lessThan": "11.1.9",
+            "status": "affected",
+            "version": "11.1",
+            "versionType": "custom"
+          },
+          {
+            "lessThan": "11.2.4",
+            "status": "affected",
+            "version": "11.2",
+            "versionType": "custom"
+          },
+          {
+            "lessThan": "11.3.1",
             "status": "affected",
-            "version": "10.4.0",
+            "version": "11.3",
             "versionType": "custom"
           }
         ]
@@ -36,6 +57,26 @@
     "providerMetadata": {
       "orgId": "00000000-0000-4000-8000-000000000000",
       "shortName": "anchoreadp"
-    }
+    },
+    "references": [
+      {
+        "url": "https://github.com/grafana/grafana/pull/95476"
+      },
+      {
+        "url": "https://github.com/grafana/grafana/pull/95486"
+      },
+      {
+        "url": "https://github.com/grafana/grafana/pull/95487"
+      },
+      {
+        "url": "https://github.com/grafana/grafana/pull/95488"
+      },
+      {
+        "url": "https://github.com/grafana/grafana/pull/95489"
+      },
+      {
+        "url": "https://github.com/grafana/grafana/pull/95490"
+      }
+    ]
   }
 }