HIGH

CVE-2021-43798

Grafana Grafana 2021-12-07 CVSS v3.1

CVSS

7.5

KEV

Description

Grafana is an open-source platform for monitoring and observability. Grafana versions 8.0.0-beta1 through 8.3.0 (except for patched versions) iss vulnerable to directory traversal, allowing access to local files. The vulnerable URL path is: `<grafana_host_url>/public/plugins//`, where is the plugin ID for any installed plugin. At no time has Grafana Cloud been vulnerable. Users are advised to upgrade to patched versions 8.0.7, 8.1.8, 8.2.7, or 8.3.1. The GitHub Security Advisory contains more information about vulnerable URL paths, mitigation, and the disclosure timeline.

Summary dbcve.org

Grafana versions 8.0.0-beta1 through 8.3.0 contain a directory traversal vulnerability in the plugin static file serving endpoint. Attackers can manipulate the plugin ID in the URL path `/public/plugins/<plugin_id>/` with traversal sequences (e.g., `../../`) to read arbitrary local files on the server, bypassing intended plugin directory restrictions.

Mitigation

Upgrade Grafana to patched versions 8.0.7, 8.1.8, 8.2.7, or 8.3.1 (or later) to remediate this path traversal vulnerability.

Proof of Concept

Patch Commit

Weakness (CWE)

CWE-22 Path Traversal

EPSS Score

88.5%

Probability of exploitation in next 30 days

99.8th percentile

References

http://packetstormsecurity.com/files/165198/Grafana-Arbitrary-File-Reading.html Third Party Advisory, VDB Entry http://packetstormsecurity.com/files/165221/Grafana-8.3.0-Directory-Traversal-Arbitrary-File-Read.html Exploit, Third Party Advisory, VDB Entry http://www.openwall.com/lists/oss-security/2021/12/09/2 Mailing List, Patch, Third Party Advisory http://www.openwall.com/lists/oss-security/2021/12/10/4 Mailing List, Patch, Third Party Advisory https://github.com/grafana/grafana/commit/c798c0e958d15d9cc7f27c72113d572fa58545ce Patch, Third Party Advisory https://github.com/grafana/grafana/security/advisories/GHSA-8pjx-jj86-j47p Patch, Vendor Advisory https://grafana.com/blog/2021/12/08/an-update-on-0day-cve-2021-43798-grafana-directory-traversal/ Vendor Advisory https://security.netapp.com/advisory/ntap-20211229-0004/ Third Party Advisory https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-43798 US Government Resource

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE