Path Traversal

🗓️ 08 Dec 2021 06:09:14Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 130 Views

Grafana Path Traversal Vulnerabilit

Reporter	Title	Published	Views	Family All 129
GithubExploit	Exploit for Path Traversal in Grafana	21 Dec 202314:24	–	githubexploit
GithubExploit	Exploit for Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in Zulip	8 Dec 202100:47	–	githubexploit
GithubExploit	Exploit for Path Traversal in Grafana	7 Dec 202112:47	–	githubexploit
GithubExploit	Exploit for Path Traversal in Grafana	7 Dec 202114:06	–	githubexploit
GithubExploit	Exploit for Path Traversal in Grafana	8 Dec 202114:14	–	githubexploit
GithubExploit	Exploit for Path Traversal in Grafana	17 Dec 202107:03	–	githubexploit
GithubExploit	Exploit for Path Traversal in Grafana	7 Dec 202115:11	–	githubexploit
GithubExploit	Exploit for Path Traversal in Grafana	4 Mar 202418:32	–	githubexploit
GithubExploit	Exploit for Path Traversal in Grafana	7 Dec 202108:59	–	githubexploit
GithubExploit	Exploit for Path Traversal in Grafana	2 Jun 202619:27	–	githubexploit

Vulners

Node

grafana grafanaMatch8.2.3-r1go

AND

grafana grafanaMatch8.1.1-r0go

AND

grafana grafanaMatch8.0.4-r0go

AND

grafana grafanaMatch8.2.1-r0go

AND

grafana grafanaMatch7.4.5-r1go

AND

grafana grafanaMatch8.0.3-r0go

AND

grafana grafanaMatch8.3.0-r0go

AND

grafana grafanaMatch8.1.5-r0go

AND

grafana grafanaMatch7.5.3-r0go

AND

grafana grafanaMatch7.5.5-r0go

AND

grafana grafanaMatch8.0.2-r0go

AND

grafana grafanaMatch8.1.2-r1go

AND

grafana grafanaMatch7.4.3-r0go

AND

grafana grafanaMatch7.5.7-r0go

AND

grafana grafanaMatch7.5.7-r1go

AND

grafana grafanaMatch8.1.2-r0go

AND

grafana grafanaMatch6.6.2-r0go

AND

grafana grafanaMatch6.7.2-r0go

AND

grafana grafanaMatch8.0.5-r0go

AND

grafana grafanaMatch8.1.7-r0go

AND

grafana grafanaMatch6.7.3-r1go

AND

grafana grafanaMatch8.2.2-r0go

AND

grafana grafanaMatch8.2.4-r0go

AND

grafana grafanaMatch7.5.1-r0go

AND

grafana grafanaMatch8.1.4-r0go

AND

grafana grafanaMatch7.5.6-r0go

AND

grafana grafanaMatch8.1.2-r2go

AND

grafana grafanaMatch7.5.2-r0go

AND

grafana grafanaMatch6.7.0-r0go

AND

grafana grafanaMatch6.7.3-r0go

AND

grafana grafanaMatch8.0.6-r0go

AND

grafana grafanaMatch6.7.1-r0go

AND

alpinelinux alpine_linuxMatchedge

grafana grafanaMatch8.2.2-r0go

AND

grafana grafanaMatch8.2.4-r0go

AND

grafana grafanaMatch8.2.5-r0go

AND

grafana grafanaMatch8.2.3-r1go

AND

alpinelinux alpine_linuxMatch3.15

grafana github.com/grafana/grafanaRangev8.0.0-beta1–8.0.0-beta1go

grafana github.com/grafana/grafanaRangev8.1.0-beta1–8.1.0-beta1go

grafana github.com/grafana/grafanaRangev8.2.0-beta1–8.2.0-beta1go

grafana github.com/grafana/grafanaRangev8.3.0-beta1–8.3.0-beta1go

Source	Link
github	www.github.com/grafana/grafana/pull/42846
github	www.github.com/grafana/grafana/commit/c798c0e958d15d9cc7f27c72113d572fa58545ce
github	www.github.com/grafana/grafana/security/advisories/GHSA-8pjx-jj86-j47p
packetstormsecurity	www.packetstormsecurity.com/files/165198/Grafana-Arbitrary-File-Reading.html
packetstormsecurity	www.packetstormsecurity.com/files/165221/Grafana-8.3.0-Directory-Traversal-Arbitrary-File-Read.html
grafana	www.grafana.com/blog/2021/12/08/an-update-on-0day-cve-2021-43798-grafana-directory-traversal/
security	www.security.netapp.com/advisory/ntap-20211229-0004/
openwall	www.openwall.com/lists/oss-security/2021/12/09/2
openwall	www.openwall.com/lists/oss-security/2021/12/10/4

12 Apr 2022 20:42Current

4.5Medium risk

Vulners AI Score4.5

CVSS 3.17.5

CVSS 25

EPSS0.94438