Grafana Path Traversal Vulnerability (CNVD-2021-100286)

Grafana is an open source monitoring tool from Grafana Labs that provides a visual monitoring interface. The tool is mainly used to monitor and analyze Graphite, InfluxDB and Prometheus, etc. A path traversal vulnerability exists in Grafana, which stems from the product’s failure to effectively handle csv files. The vulnerability only exists in databases configured with a testdata db data source. An attacker can perform directory traversal through this vulnerability.