CVE-2021-43798 PoC — Grafana 路径遍历漏洞

Description

Python implementation of a tool for decrypting and encrypting sensitive data in Grafana, specifically addressing the vulnerabilities associated with CVE-2021-43798. Grafana encrypts all data source passwords using the AES algorithm with the secret_key found in the defaults.ini configuration file.

介绍

# Grafana-CVE-2021-43798
Python implementation of a tool for decrypting and encrypting sensitive data in Grafana, specifically addressing the vulnerabilities associated with CVE-2021-43798. Grafana encrypts all data source passwords using the AES algorithm with the secret_key found in the defaults.ini configuration file.

### Screenshots
![   ](https://i.imgur.com/Zc68pLn.png)

### Install Dependencies
```bash
pip install cryptography

文件快照

备注