A flaw was found in Grafana. An authenticated user with query permissions can redirect Google Cloud Monitoring data source requests to unauthorized API endpoints. This issue can lead to information disclosure by exposing sensitive data across accessible cloud projects, and may allow unauthorized modifications depending on the permissions of the configured credentials.