## https://sploitus.com/exploit?id=D4E6B826-2C3C-5B66-B6B5-9CB97D0BF9A6
# CVE-2021-43798_exploit
Grafana is an open-source platform for monitoring and observability. Grafana versions 8.0.0-beta1 through 8.3.0 (except for patched versions) is vulnerable to directory traversal, allowing access to local files. The vulnerable URL path is: `/public/plugins//`, where is the plugin ID for any installed plugin. Users are advised to upgrade to patched versions 8.0.7, 8.1.8, 8.2.7, or 8.3.1.
## Contributors
- Aymen BOUFERROUM
- Zakaria KRACHENI
## Ref
https://cve.report/CVE-2021-43798
https://github.com/jas502n/Grafana-CVE-2021-43798
https://grafana.com/blog/2021/12/07/grafana-8.3.1-8.2.7-8.1.8-and-8.0.7-released-with-high-severity-security-fix/