Grafana Direct Data Source Password Exposure Vulnerability

A vulnerability exists in Grafana that exposes passwords of direct data sources when public dashboards are used, even if those data sources are not actively utilized in the dashboards. This issue does not affect proxied data sources. Users are advised to convert direct data sources to proxied ones whenever possible to enhance security.

Impact

Exposing passwords of direct data sources can lead to unauthorized access to sensitive data or systems, depending on the nature of the data source.