CVE-2021-43798-Grafana-File-Read

Grafana-File-Read Lecture de fichier non autorisée dans Grafana Versions affectées : 8.0.0-lastest reference: - https://github.com/tangxiaofeng7/Grafana-File-Read Exploitation d'une vulnérabilité de validation insuffisante des routes URL dans l'interface /public/plugins de Grafana pour lire des...

CVE-2021-43798

CVE-2021-43798 by Privacy Hunter प्रभावित संस्करण: Grafana 8.0.0-beta1 से 8.3.0 तक पैच किए गए संस्करणों को छोड़कर कमजोरी का प्रकार: Directory Traversal निर्देशिका में भ्रमण प्रभाव स्तर: अत्यंत खतरनाक Critical प्लेटफ़ॉर्म: Grafana ओपन-सोर्स मॉनिटरिंग और ऑब्ज़र्वेबिलिटी प्लेटफ़ॉर्म ⚠️ कमजोरी का विवर...

Grafana-CVE-2021-43798

Grafana-CVE-2021-43798 Grafana File-Read Versões afetadas: 8.0.0-lastest Poc-http-get /public/plugins/plugins-lst/../../../../../../../../filename Lista de plugins padrão root@kitploit: alertlist annolist grafana-azure-monitor-datasource barchart bargauge cloudwatch dashlist elasticsearch gauge...

Exploit for Path Traversal in Grafana

CVE-2021-43798 CVE-2021-43798 is a high-severity path traversa...

SUSE CVE-2025-47943

Gogs is an open source self-hosted Git service. In application version 0.14.0+dev and prior, there is a stored cross-site scripting XSS vulnerability present in Gogs, which allows client-side Javascript code execution. The vulnerability is caused by the usage of a vulnerable and outdated componen...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the pdfjs-1.4.20 component under public/plugins/. An attacker can execute arbitrary JavaScript code in the context of the user's browser by injecting malicious scripts into PDF files rendered by the...

PT-2021-7636

Name of the Vulnerable Software and Affected Versions Grafana versions 8.0.0-beta1 through 8.3.0 Description Grafana is vulnerable to a directory traversal vulnerability, allowing attackers to access local files. The vulnerable URL path is: /public/plugins//, where is the plugin ID for any...