Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
attackerkbAttackerKBAKB:72725B13-8444-4A5A-B4E8-71CF57FF5C25
HistoryJun 03, 2020 - 12:00 a.m.

CVE-2020-13379

2020-06-0300:00:00
attackerkb.com
103

8.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:N/A:P

JSON

The avatar feature in Grafana 3.0.1 through 7.0.1 has an SSRF Incorrect Access Control issue. This vulnerability allows any unauthenticated user/client to make Grafana send HTTP requests to any URL and return its result to the user/client. This can be used to gain information about the network that Grafana is running on. Furthermore, passing invalid URL objects could be used for DOS’ing Grafana via SegFault.

Recent assessments:

ericalexanderorg at June 10, 2020 3:18pm UTC reported:

SSRF should be possible through <https://vulnerable.host/avatar/redirect&gt;

That redirect is tricky since the vulnerable code is splitting on “/” and taking the last value. Need it to hit a url with a vulnerable redirect that can redirect to a metadata URL. From there it may be possible to hit the metadata url and grab STS tokens or pivot elsewhere.

wvu-r7 at August 03, 2020 11:17pm UTC reported:

SSRF should be possible through <https://vulnerable.host/avatar/redirect&gt;

That redirect is tricky since the vulnerable code is splitting on “/” and taking the last value. Need it to hit a url with a vulnerable redirect that can redirect to a metadata URL. From there it may be possible to hit the metadata url and grab STS tokens or pivot elsewhere.

Assessed Attacker Value: 5
Assessed Attacker Value: 5Assessed Attacker Value: 3

References

Related

veracode 1
prion 1
nessus 14
redhat 8
github 1
packetstorm 1
avleonov 1
osv 3
cve 1
altlinux 2
alpinelinux 1
openvas 4
oraclelinux 3
zdt 1
redhatcve 1
ubuntucve 1
nuclei 1
exploitdb 1
suse 4
fedora 2
veracode
veracode
Server-Side Request Forgery (SSRF)
2020-06-04 04:20:58
prion
prion
Design/Logic Flaw
2020-06-03 19:15:00
nessus
nessus
Fedora 31 : grafana (2020-e6e81a03d6)
2020-06-17 00:00:00
CentOS 8 : grafana (CESA-2020:2641)
2021-02-01 00:00:00
RHEL 8 : grafana (RHSA-2020:2676)
2020-06-25 00:00:00
redhat
redhat
(RHSA-2020:2792) Moderate: OpenShift Container Platform 4.4.11 grafana-container security update
2020-07-06 20:05:13
(RHSA-2020:5599) Important: web-admin-build security and bug fix update
2020-12-17 04:13:39
(RHSA-2020:2676) Important: grafana security update
2020-06-23 12:35:52
github
github
Server Side Request Forgery in Grafana
2022-02-15 01:57:18
packetstorm
packetstorm
Grafana 7.0.1 Denial Of Service
2020-07-06 00:00:00
avleonov
avleonov
How to list, create, update and delete Grafana dashboards via API
2020-06-10 00:46:05
osv
osv
CVE-2020-13379
2020-06-03 19:15:10
BIT-grafana-2020-13379
2024-03-06 11:01:01
Server Side Request Forgery in Grafana
2022-02-15 01:57:18
cve
cve
CVE-2020-13379
2020-06-03 19:15:00
altlinux
altlinux
Security fix for the ALT Linux 10 package grafana version 7.0.3-alt1
2020-06-04 00:00:00
Security fix for the ALT Linux 9 package grafana version 7.0.3-alt1
2020-06-04 00:00:00
alpinelinux
alpinelinux
CVE-2020-13379
2020-06-03 19:15:00
openvas
openvas
Grafana 3.0.1 < 6.7.4, 7.0 < 7.0.2 SSRF Vulnerability
2020-06-08 00:00:00
Fedora: Security Advisory for grafana (FEDORA-2020-a09e5be0be)
2020-06-23 00:00:00
openSUSE: Security Advisory for grafana, (openSUSE-SU-2020:0892-1)
2020-06-29 00:00:00
oraclelinux
oraclelinux
grafana security update
2020-06-22 00:00:00
grafana kubernetes-cni kubernetes-cni-plugins kubernetes kubernetes olcne security update
2020-06-12 00:00:00
grafana security, bug fix, and enhancement update
2020-11-10 00:00:00
zdt
zdt
Grafana 7.0.1 - Denial of Service Exploit
2020-07-07 00:00:00
redhatcve
redhatcve
CVE-2020-13379
2020-06-03 17:21:50
ubuntucve
ubuntucve
CVE-2020-13379
2020-06-03 00:00:00
nuclei
nuclei
Grafana 3.0.1-7.0.1 - Server-Side Request Forgery
2022-12-08 00:39:09
exploitdb
exploitdb
Grafana 7.0.1 - Denial of Service (PoC)
2020-07-06 00:00:00
suse
suse
Security update for grafana (moderate)
2020-10-10 00:00:00
Security update for grafana, grafana-piechart-panel, grafana-status-panel (moderate)
2020-06-28 00:00:00
Security update for grafana (moderate)
2020-10-04 00:00:00
fedora
fedora
[SECURITY] Fedora 32 Update: grafana-6.7.4-1.fc32
2020-06-16 01:31:15
[SECURITY] Fedora 31 Update: grafana-6.7.4-1.fc31
2020-06-15 02:07:15

8.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:N/A:P

JSON
Related for AKB:72725B13-8444-4A5A-B4E8-71CF57FF5C25
veracode1prion1nessus14redhat8github1packetstorm1avleonov1osv3cve1altlinux2alpinelinux1openvas4oraclelinux3zdt1redhatcve1ubuntucve1nuclei1exploitdb1suse4fedora2