FreeBSDA994FF7D-5B3F-11EC-8398-6C3BE5272ACDGrafana -- Directory Traversal
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
0.012 Low
EPSS
Percentile
84.7%
GitHub Security Labs reports:
A vulnerability through which authenticated users could read out fully lowercase or fully uppercase .md files through directory traversal. Doing our own follow-up investigation we found a related vulnerability through which authenticated users could read out arbitrary .csv files through directory traversal. Thanks to our defense-in-depth approach, at no time has Grafana Cloud been vulnerable.
The vulnerable URL path is: /api/plugins/./markdown/. for .md files
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| FreeBSD | any | noarch | grafana | = 5.0.0 | UNKNOWN |
| FreeBSD | any | noarch | grafana | < 7.5.12 | UNKNOWN |
| FreeBSD | any | noarch | grafana6 | = 6.0.0 | UNKNOWN |
| FreeBSD | any | noarch | grafana7 | = 7.0.0 | UNKNOWN |
| FreeBSD | any | noarch | grafana7 | < 7.5.12 | UNKNOWN |
| FreeBSD | any | noarch | grafana8 | = 8.0.0 | UNKNOWN |
| FreeBSD | any | noarch | grafana8 | < 8.3.2 | UNKNOWN |
Related
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
0.012 Low
EPSS
Percentile
84.7%