CVE-2021-43798 PoC — Grafana 路径遍历漏洞

介绍

# CVE-2021-43798 Grafana-Arbitrary-File-Read (8.0.0 ~~ 8.3.0)

A vulnerability in Grafana (CVE-2021-43798) versions 8.0.0 ~~ 8.3.0  that allows an unauthenticated attacker to read arbitrary files from the server by leveraging a path traversal aimed towards the `/public/plugins/<plugin>` path to access sensitive files on the system.

# Usage

`python3 exploit.py --domain <example.com> --port <PORT>`


  1) The script automatically tests a lit of possibly vulnerable paths
  2) Interactive Shell: Once a vulnerable endpoint is found, the script prompts for a file path to read form the server.

# Shell Example:

![image](https://github.com/user-attachments/assets/991978c0-112c-4aa1-982e-b3fffa0520e3)


# References
[CVE-2021-43789](https://grafana.com/blog/2021/12/07/grafana-8.3.1-8.2.7-8.1.8-and-8.0.7-released-with-high-severity-security-fix/).



Disclaimer
This script is for educational purposes.

文件快照

备注