CVE-2021-43799

CVE-2021-43798 Grafana 8.x Path Traversal Pre-Auth All credits go to j0v and his tweet https://twitter.com/j0v0x0/status/1466845212626542607 Disclaimer This is for educational purposes only. I am not responsible for your actions. Use at your own discretion. In good faith, I've held back releasing...

CVE-2021-43798

CVE-2021-43798 Grafana 8.x Path Traversal Pre-Auth All credits go to j0v and his tweet https://twitter.com/j0v0x0/status/1466845212626542607 Disclaimer This is for educational purposes only. I am not responsible for your actions. Use at your own discretion. In good faith, I've held back releasing...

CVE-2021-43798

CVE-2021-43798 Grafana 8.x lectura arbitraria de archivos http://ryze-t.com/posts/2021/12/15/CVE-2021-43798-Grafana%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96.html Uso exp http://example.com /etc/passwd Efecto...

Aiven Ltd: Zero day path traversal vulnerability in Grafana 8.x allows unauthenticated arbitrary local file read

Summary: Hi team, I've found a path traversal issue in the Grafana instances hosted on the Aiven platforms. With the path traversal it's possible for an unauthenticated user to read arbitrary files on the server. Steps To Reproduce: 1. Login at https://console.aiven.io 1. Create a new Grafana...

@grafana/runtime (>=8.0.0-beta.1, <=8.2.2), @grafana/toolkit (>=8.0.0-beta.1, <=8.2.2) +1 more potentially affected by CVE-2021-41174 via @grafana/data (>=8.0.0, <=8.2.2)

@grafana/data NPM version =8.0.0, =8.0.0-beta.1, =8.0.0-beta.1, =8.0.0-beta.1, =8.2.2 Source cves: CVE-2021-41174 Source advisory: OSV:GHSA-3J9M-HCV9-RPJ8...