Fedora: Security Advisory (FEDORA-2024-9b005962f9)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 40 : chisel (2024-5aad2fda6a)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-5aad2fda6a advisory. Update to new upstream version closes rhbz2303131 Tenable has extracted the preceding description block directly from the Fedora security advisory...

Fedora 39 : chisel (2024-9b005962f9)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-9b005962f9 advisory. Update to new upstream version closes rhbz2303131 Tenable has extracted the preceding description block directly from the Fedora security advisory...

CVE-2024-43798

creationtimestamp| type| source ---|---|--- 2024-08-27 02:21:34+00:00| seen| https://t.me/cvedetector/4225 2024-08-27 18:40:29+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-38jh-8h67-m7mj...

Grafana directory traversal for .cvs files

Today we are releasing Grafana 8.3.2 and 7.5.12. This patch release includes a moderate severity security fix for directory traversal for arbitrary .csv files. It only affects instances that have the developer testing tool called TestData DB data source enabled and configured. The vulnerability i...

GHSA-7533-C8QV-JM9M Grafana directory traversal for .cvs files

Today we are releasing Grafana 8.3.2 and 7.5.12. This patch release includes a moderate severity security fix for directory traversal for arbitrary .csv files. It only affects instances that have the developer testing tool called TestData DB data source enabled and configured. The vulnerability i...

Exploit for Path Traversal in Grafana

Subir o lab docker compose...

Exploit for Path Traversal in Grafana

CVE-2021-43798 - Grafana Directory Traversal 🔍 Grafana is an...

Grafana path traversal

Today we are releasing Grafana 8.3.1, 8.2.7, 8.1.8, 8.0.7. This patch release includes a high severity security fix that affects Grafana versions from v8.0.0-beta1 through v8.3.0. Release v8.3.1, only containing a security fix: - Download Grafana 8.3.1 - Release notes Release v8.2.7, only...

GHSA-8PJX-JJ86-J47P Grafana path traversal

Today we are releasing Grafana 8.3.1, 8.2.7, 8.1.8, 8.0.7. This patch release includes a high severity security fix that affects Grafana versions from v8.0.0-beta1 through v8.3.0. Release v8.3.1, only containing a security fix: - Download Grafana 8.3.1 - Release notes Release v8.2.7, only...

Exploit for Path Traversal in Grafana

CVE-2021-43798 Directory Traversal and Arbitrary File Read on...

VulnCheck KEV: CVE-2021-43798

Grafana contains a path traversal vulnerability that could allow access to local files...

CVE-2023-43798

creationtimestamp| type| source ---|---|--- 2023-10-31 01:20:33+00:00| seen| https://t.me/cibsecurity/73198...

CVE-2023-43798 BigBlueButton Blind SSRF When Uploading Presentation (mitigation bypass)

BigBlueButton is an open-source virtual classroom. BigBlueButton prior to versions 2.6.12 and 2.7.0-rc.1 is vulnerable to Server-Side Request Forgery SSRF. This issue is a bypass of CVE-2023-33176. A patch in versions 2.6.12 and 2.7.0-rc.1 disabled follow redirect at httpclient.execute since the...

CVE-2023-43798

CVE-2023-43798 affects BigBlueButton prior to 2.6.12 and 2.7.0-rc.1, enabling Server-Side Request Forgery (SSRF) and bypassing CVE-2023-33176. The root cause is improper handling of redirects in the HTTP client during presentation URL download, which allowed unvalidated external URLs to be used i...

Grafana Labs Directory Traversal (CVE-2021-43798)

Binary data grafanacve-2021-43798.nbin...

Exploit for Path Traversal in Grafana

grafana-exploit-CVE-2021-43798 About What is this explo...

K43312023: Grafana vulnerability CVE-2021-43798

Security Advisory Description Grafana is an open-source platform for monitoring and observability. Grafana versions 8.0.0-beta1 through 8.3.0 except for patched versions iss vulnerable to directory traversal, allowing access to local files. The vulnerable URL path is: /public/plugins//, where is...

CVE-2022-43798

To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...

SUSE: Security Advisory (SUSE-SU-2022:4428-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...