Sploitus

Exploit for Path Traversal in Grafana

CVE-2021-43798

githubexploit · 2023-01-28

Exploit Code

README6 lines
## https://sploitus.com/exploit?id=682F139F-8AA5-5B90-9DB5-DDFF42D485F3
# LabAutomationCVE-2021-43798

I make a script for pentest automation where i exploit CVE-2021-43798 (a path traversal on Grafana) to steal user secrets (SSH key) and then gain privileges on a Linux system (using SUID).

I automate this lab to share the pentest methodology.