CVE-2024-9476

CVE-2024-9476 is a medium-severity privilege escalation vulnerability in Grafana Labs Grafana OSS and Enterprise, specifically impacting instances that utilize the Organizations feature for resource isolation. An authenticated, high-privileged user could exploit the Grafana Cloud Migration Assistant to gain unauthorized access to resources belonging to other organizations within the same Grafana instance. The CVSS score is 5.1, indicating a local attack vector with low attack complexity, leading to high confidentiality impact. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.