day05-grafana-sqlexpr-lab

5일차 – Grafana SQL Expressions → DuckDB LFI CVE-2024-9264 TL;DR: 영향을 받는 Grafana 11.x 빌드에서 로그인한 Viewer는 SQL Expressions 를 사용할 수 있습니다. Grafana는 표현식을 서버의 DuckDB 로 전달합니다. readtext / readblob를 사용하여 로컬 파일을 읽을 수 있습니다LFI. /opt/flag.txt에 플래그를 심어 두었습니다. 빌드 → 실행 docker build -t day5-grafana . docker rm -f da...

OSV-2025-1001 Dynamic-stack-buffer-overflow in _ox_err_set_with_location

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=470447384 Crash type: Dynamic-stack-buffer-overflow READ 1 Crash state: oxerrsetwithlocation readtext readelement...

CVE-2024-8099

A Server-Side Request Forgery SSRF vulnerability exists in the latest version of vanna-ai/vanna when using DuckDB as the database. An attacker can exploit this vulnerability by submitting crafted SQL queries that leverage DuckDB's default features, such as "readcsv", "readcsvauto", "readtext", an...

CVE-2024-8099: Server-Side Request Forgery (SSRF)

A Server-Side Request Forgery SSRF vulnerability exists in the latest version of vanna-ai/vanna when using DuckDB as the database. An attacker can exploit this vulnerability by submitting crafted SQL queries that leverage DuckDB's default features, such as readcsv, readcsvauto, readtext, and...