CVE-2021-43798
Grafana is an open-source platform for monitoring and observability. Grafana versions 8.0.0-beta1 through 8.3.0 (except for patched versions) iss vulnerable to directory traversal, allowing access to local files. The vulnerable URL path is: `<grafana_host_url>/public/plugins//`, where is the plugin ID for any installed plugin. At no time has Grafana Cloud been vulnerable. Users are advised to upgrade to patched versions 8.0.7, 8.1.8, 8.2.7, or 8.3.1. The GitHub Security Advisory contains more information about vulnerable URL paths, mitigation, and the disclosure timeline.
- Grafana
- < 8.0.7, 8.1.8, 8.2.7, 8.0.0, 8.3.0
- Fix
- Available
- CVSS 3.1
- 7.5 HIGH
- EPSS
- 88.5% (100th percentile)
- Weakness
- CWE-22
- NVD status
- Analyzed
- Published
- 2021-12-07
CVE-2021-43798 at NVD
100 known exploits for CVE-2021-43798
Proof-of-concept code and exploit modules indexed by Sploitus
CVE-2021-43798-grafana_fileread
CVE-2021-43798
grafana-exploit-CVE-2021-43798
CVE-2021-43798
CVE-2021-43798
Grafana_POC-CVE-2021-43798
CVE-2021-43798
CVE-2021-43798-EXPLOIT
CVE-2021-43798
GrafanaDirectoryScanner
CVE-2021-43798
CVE-2021-43798
GrafXploit
CVE-2021-43798
grafanaExp
CVE-2021-43798
CVE-2021-43798-Grafana
Grafana-CVE-2021-43798Exp
Grafana-8.3-Directory-Traversal
CVE-2021-43798
Grafana-CVE-2021-43798
CVE-2021-43798
CVE-2021-43799
LabAutomationCVE-2021-43798
CVE-2021-43798-Grafana-File-Read
Grafana-CVE-2021-43798
CVE-2021-43798-Grafana-path-traversal-tester
Grafana-Password-Decryptor
Grafana-Decryptor-for-CVE-2021-43798
CVE-2021-43798
CVE-2021-43798-Grafana-POC
Grafana-LFI-exploit
CVE-2021-43798-Exploit-for-Windows-and-Linux
CVE-2021-43798-Grafana-Exp
CVE-2021-43798
exploit-grafana-CVE-2021-43798
Grafxploit
CVE-2021-43798
GrafTraverse-CVE-2021-43798
grafana-CVE-2021-43798
CVE-2021-43798
grafanaExp
Grafana-CVE-2021-43798
CVE-2021-43798
CVE-2021-43798
GrafanaDirInclusion
cve-2021-43798-enum
CVE-2021-43798
CVE-2021-43798
grafana-unauth-file-read
CVE-2021-43798
grafana-cve-2021-43798
CVE-2021-43798-mass_scanner
CVE-2021-43798-poc
CVE-2021-43798_exploit
CVE-2021-43798-Grafana-File-Read
CVE-2021-43798
CVE-2021-43798
-Grafana-LFI-CVE-2021-43798
Exploit for Path Traversal in Grafana
Exploit for Path Traversal in Grafana
Exploit for Path Traversal in Grafana
Exploit for Path Traversal in Grafana
Exploit for Path Traversal in Grafana
Exploit for Path Traversal in Grafana
Exploit for Path Traversal in Grafana
Exploit for Path Traversal in Grafana
Exploit for Path Traversal in Grafana
Grafana Plugin Path Traversal
Exploit for Path Traversal in Grafana
Exploit for Path Traversal in Grafana
Exploit for Path Traversal in Grafana
Exploit for Path Traversal in Grafana
Exploit for Path Traversal in Grafana
Exploit for Path Traversal in Grafana
Exploit for Path Traversal in Grafana
Exploit for Path Traversal in Grafana
Exploit for Path Traversal in Grafana
Exploit for Path Traversal in Grafana
Exploit for Path Traversal in Grafana
Exploit for Path Traversal in Grafana
Exploit for Path Traversal in Grafana
Exploit for Path Traversal in Grafana
Exploit for Path Traversal in Grafana
Exploit for Path Traversal in Grafana
Grafana 8.3.0 Directory Traversal / Arbitrary File Read
Grafana 8.3.0 - Directory Traversal and Arbitrary File Read Exploit
Grafana 8.3.0 - Directory Traversal and Arbitrary File Read
Exploit for Path Traversal in Grafana
Exploit for Path Traversal in Grafana
Exploit for Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in Zulip
Exploit for Path Traversal in Grafana
Exploit for Path Traversal in Grafana
Exploit for Path Traversal in Grafana
Exploit for Path Traversal in Grafana
Exploit for Path Traversal in Grafana
Exploit for Path Traversal in Grafana
Exploit for Path Traversal in Grafana
Exploit for Path Traversal in Grafana
Exploit for Path Traversal in Grafana