SICK Grafana OSS Open Redirect Vulnerability in Incoming Goods Suite

A vulnerability allowing open redirects has been identified in the Grafana OSS organization switching feature, specifically within the SICK Incoming Goods Suite product. This vulnerability arises when multiple organizations are present in the Grafana instance, and a user is on a different organization than the one indicated in the URL. Exploitation of this vulnerability could lead to cross-site scripting (XSS) attacks.

Impact

Exploitation of this vulnerability could result in unauthorized redirection of users, potentially leading to cross-site scripting (XSS) attacks.

Remediation

Users are strongly recommended to upgrade to the latest release of SICK Incoming Goods Suite (version 1.2.1 or higher).