Exploit for Path Traversal in Grafana

CVE-2021-4379 CVE-2021-43798

githubexploit · 2026-01-08

Description

Discusses a path traversal exploit affecting Grafana.

Entry point

ParameterpluginId · path

Path/public/plugins/alertlist/../../../../../../../../etc/passwd

Directory traversal in Grafana plugin asset path

Affected software

Villatheme Woocommerce Multi Currency< 2.1.18

Grafana< 8.0.7, 8.1.8, 8.2.7, 8.0.0, 8.3.0

All known vulnerabilities by product

Woocommerce Multi Currency Alt Linux Grafana Suse

CVSS Score

7.5

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:NONE

Availability:NONE

Working code

100%confidence this exploit runs

Based on 2 file(s) in the source

EPSS Score

88.5%higher than 99.8% of all CVEs

Updated 2026-08-25

Exploit Details

Modified:2026-01-08 21:28

Last Seen:2026-01-08 21:43

Reporter:baktistr

Written in:Shell

Last commit:2026-01-08

Other exploits for the same CVE

CVE-2021-43798-grafana_fileread

2026-09-09 KitPloitKITPLOIT

CVE-2021-43798

2026-09-09 KitPloitKITPLOIT

grafana-exploit-CVE-2021-43798

2026-09-09 KitPloitKITPLOIT

CVE-2021-43798

2026-09-09 KitPloitKITPLOIT

CVE-2021-43798

2026-09-09 KitPloitKITPLOIT

Grafana_POC-CVE-2021-43798

2026-09-09 KitPloitKITPLOIT

CVE-2021-43798

2026-09-09 KitPloitKITPLOIT

CVE-2021-43798-EXPLOIT

2026-09-09 KitPloitKITPLOIT

Exploit Code

README2 lines

## https://sploitus.com/exploit?id=FC1658CC-EE6B-52F8-8A1C-8616F5A50F96
CVE-2021-4379 Enumeration Tools

Exploit Code

Share

Share on social media: