CVE-2021-43798

CVE-2021-43798 di Privacy Hunter Versioni interessate: da Grafana 8.0.0-beta1 a 8.3.0 escluse le versioni con patch Tipo di vulnerabilità: Directory Traversal attraversamento di directory Livello di impatto: Critico Piattaforma: Grafana piattaforma open-source di monitoraggio e osservabilità ⚠️...

CVE-2021-43798-Grafana-File-Read

Grafana-File-Read Grafana: Nicht autorisiertes Lesen von Dateien Betroffene Version: 8.0.0-lastest reference: - https://github.com/tangxiaofeng7/Grafana-File-Read Nutzt eine Schwachstelle in Grafana aus, bei der die URL-Routenvalidierung der /public/plugins-Schnittstelle nicht streng ist, um...

Grafana-CVE-2021-43798

Grafana-CVE-2021-43798 Grafana File-Read Versões afetadas: 8.0.0-lastest Poc-http-get /public/plugins/plugins-lst/../../../../../../../../filename Lista de plugins padrão root@kitploit: alertlist annolist grafana-azure-monitor-datasource barchart bargauge cloudwatch dashlist elasticsearch gauge...

Exploit for Path Traversal in Grafana

CVE-2021-43798 CVE-2021-43798 is a high-severity path traversa...

SUSE CVE-2025-47943

Gogs is an open source self-hosted Git service. In application version 0.14.0+dev and prior, there is a stored cross-site scripting XSS vulnerability present in Gogs, which allows client-side Javascript code execution. The vulnerability is caused by the usage of a vulnerable and outdated componen...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the pdfjs-1.4.20 component under public/plugins/. An attacker can execute arbitrary JavaScript code in the context of the user's browser by injecting malicious scripts into PDF files rendered by the...

PT-2021-7636

Name of the Vulnerable Software and Affected Versions Grafana versions 8.0.0-beta1 through 8.3.0 Description Grafana is vulnerable to a directory traversal vulnerability, allowing attackers to access local files. The vulnerable URL path is: /public/plugins//, where is the plugin ID for any...