CVE-2022-39306

CVE-2022-39306 is an Improper Input Validation vulnerability affecting Grafana versions prior to 9.2.4 and 8.5.15. This flaw allows an attacker to manipulate the organization invitation process, enabling them to join an organization with a chosen username/email. With a CVSS score of 8.1 (HIGH), this vulnerability has a network attack vector, low attack complexity, and can lead to high confidentiality and integrity impacts. There is no known active exploitation, publicly available exploit code, or workarounds, and it has received minimal community discussion.