I have run Zap scanning tool on my Grafana Project. we are using grafana 6.7.3 version.
Zap has reported Timestamp Disclosure - Unix alert. Below is detail of Alert -
| Informational (Low) | Timestamp Disclosure - Unix |
|---|---|
| Description | A timestamp was disclosed by the application/web server - Unix |
| URL | http://<IpAddress>/api/datasources/proxy/1/api/v1/<query-range> |
| Method | GET |
| Evidence | 1599445200 |
| URL | http://<IpAddress>/api/datasources/proxy/1/api/v1/<query-range> |
| Method | GET |
| Evidence | 1599405000 |
| URL | http://<IpAddress>/api/datasources/proxy/1/api/v1/<query-range> |
| Method | GET |
| Evidence | 1599441300 |
| URL | http://<IpAddress>/api/datasources/proxy/1/api/v1/<query-range> |
| Method | GET |
| Evidence | 1599381000 |
| URL | http://<IpAddress>/api/datasources/proxy/1/api/v1/<query-range> |
| Method | GET |
| Evidence | 1599390600 |
| URL | http://<IpAddress>/api/datasources/proxy/1/api/v1/<query-range> |
| Method | GET |
| Evidence | 1599421200 |
| URL | http://<IpAddress>/api/datasources/proxy/1/api/v1/<query-range> |
| Method | GET |
| Evidence | 1599438000 |
| URL | http://<IpAddress>/api/datasources/proxy/1/api/v1/<query-range> |
| Method | GET |
| Evidence | 1599442800 |
| URL | http://<IpAddress>/api/datasources/proxy/1/api/v1/<query-range> |
| Method | GET |
| Evidence | 1599382200 |
| URL | http://<IpAddress>/api/datasources/proxy/1/api/v1/<query-range> |
| Method | GET |
| Evidence | 1599430800 |
| URL | http://<IpAddress>/api/datasources/proxy/1/api/v1/<query-range> |
| Method | GET |
| Evidence | 1599405900 |
| URL | http://<IpAddress>/api/datasources/proxy/1/api/v1/<query-range> |
| Method | GET |
| Evidence | 1599454800 |
| URL | http://<IpAddress>/public/img/grafana_mask_icon.svg |
| Method | GET |
| Evidence | 76775068 |
| URL | http://<IpAddress>/api/datasources/proxy/1/api/v1/<query-range> |
| Method | GET |
| Evidence | 1599422400 |
| URL | http://<IpAddress>/api/datasources/proxy/1/api/v1/<query-range> |
| Method | GET |
| Evidence | 1599388200 |
| URL | http://<IpAddress>/api/datasources/proxy/1/api/v1/<query-range> |
| Method | GET |
| Evidence | 1599397800 |
| URL | http://<IpAddress>/api/datasources/proxy/1/api/v1/<query-range> |
| Method | GET |
| Evidence | 1599428400 |
| URL | http://<IpAddress>/api/datasources/proxy/1/api/v1/<query-range> |
| Method | GET |
| Evidence | 1599459600 |
| URL | http://<IpAddress>/api/datasources/proxy/1/api/v1/<query-range> |
| Method | GET |
| Evidence | 1599424200 |
| URL | http://<IpAddress>/api/datasources/proxy/1/api/v1/<query-range> |
| Method | GET |
| Evidence | 1599392100 |
| Instances | 2836 |
Could you please let me know the resolution for the vulnerability.
Regards,
Abhimanyu