CVE-2021-43798highunder attackCWE-22

CVE-2021-43798: high-severity vulnerability in grafana

Grafana path traversal

Published · Updated

Follow this CVE+ Monitor Grafana+ Monitor github.com/grafana/grafana

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

100Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 7.5epss 89%
from disclosure to weaponsame day
Published on NVDDec 7
1st PoCDec 6
metasploitDec 2
CISA KEV+1402d
What the vendors declare (VEX)

Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.

Red HatVEX document ↗
Not affected
11 products (33 components) — because the vulnerable code is not present in the product
Red Hat Enterprise Linux 8 · OpenShift Service Mesh 2.0 · Red Hat Ceph Storage 3 · Red Hat Enterprise Linux 9 · Red Hat Ceph Storage 2 · and others 6
Action required by CISAfederal deadline: 2025-10-30

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

In short

Grafana versions 8.0-8.3 have a flaw that allows attackers to access files on the server by manipulating the plugin URL path. This bypasses normal access controls and could expose sensitive data like configuration files or credentials.

Technical detail

Path traversal vulnerability in Grafana's public plugin endpoint allows unauthenticated attackers to read arbitrary files via directory traversal sequences in the plugin ID parameter. The vulnerability affects versions 8.0.0-beta1 through 8.3.0 (excluding patched releases) and requires only network access to the vulnerable endpoint.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

Grafana is an open-source platform for monitoring and observability. Grafana versions 8.0.0-beta1 through 8.3.0 (except for patched versions) iss vulnerable to directory traversal, allowing access to local files. The vulnerable URL path is: `<grafana_host_url>/public/plugins//`, where is the plugin ID for any installed plugin. At no time has Grafana Cloud been vulnerable. Users are advised to upgrade to patched versions 8.0.7, 8.1.8, 8.2.7, or 8.3.1. The GitHub Security Advisory contains more information about vulnerable URL paths, mitigation, and the disclosure timeline.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
grafana · grafana
public PoCs found — 126
exploitdbwww.exploit-db.com/exploits/50581unverifiedgithubgithub.com/jas502n/Grafana-CVE-2021-43798★ 370githubgithub.com/A-D-Team/grafanaExp★ 270githubgithub.com/pedrohavay/exploit-grafana-CVE-2021-43798★ 46githubgithub.com/taythebot/CVE-2021-43798★ 43githubgithub.com/zer0yu/CVE-2021-43798★ 27githubgithub.com/Mr-xn/CVE-2021-43798★ 24githubgithub.com/MoCh3n/CVE-2021-43798-grafana_fileread★ 17githubgithub.com/ScorpionsMAX/CVE-2021-43798-Grafana-POC★ 14githubgithub.com/asaotomo/CVE-2021-43798-Grafana-Exp★ 12githubgithub.com/Sic4rio/Grafana-Decryptor-for-CVE-2021-43798★ 9githubgithub.com/Mo0ns/Grafana_POC-CVE-2021-43798★ 9githubgithub.com/kenuosec/grafanaExp★ 6githubgithub.com/rodpwn/CVE-2021-43798-mass_scanner★ 5githubgithub.com/z3n70/CVE-2021-43798★ 5githubgithub.com/s1gh/CVE-2021-43798★ 4githubgithub.com/wezoomagency/GrafXploit★ 4githubgithub.com/K3ysTr0K3R/CVE-2021-43798-EXPLOIT★ 4githubgithub.com/hupe1980/CVE-2021-43798★ 3githubgithub.com/0xSAZZAD/Grafana-CVE-2021-43798★ 3githubgithub.com/Ryze-T/CVE-2021-43798★ 2githubgithub.com/Jroo1053/GrafanaDirInclusion★ 2githubgithub.com/monke443/CVE-2021-43798★ 2githubgithub.com/fanygit/Grafana-CVE-2021-43798Exp★ 2githubgithub.com/LongWayHomie/CVE-2021-43798★ 1githubgithub.com/k3rwin/CVE-2021-43798-Grafana★ 1githubgithub.com/Strikoder-Premium/Grafana-Password-Decryptor★ 1githubgithub.com/wagneralves/CVE-2021-43798★ 1githubgithub.com/str1keboo/CVE-2021-43798★ 1githubgithub.com/Okymi-X/CVE-2021-43798★ 1githubgithub.com/lfz97/CVE-2021-43798-Grafana-File-Read★ 1githubgithub.com/FAOG99/GrafanaDirectoryScanner★ 1githubgithub.com/aymenbouferroum/CVE-2021-43798_exploit★ 1githubgithub.com/katseyres2/CVE-2021-43798★ 0githubgithub.com/ticofookfook/CVE-2021-43798★ 0githubgithub.com/ravi5hanka/CVE-2021-43798-Exploit-for-Windows-and-Linux★ 0githubgithub.com/suljov/Grafana-LFI-exploit★ 0githubgithub.com/abuyazeen/CVE-2021-43798-Grafana-path-traversal-tester★ 0githubgithub.com/notbside/CVE-2021-43798-PoC★ 0githubgithub.com/G01d3nW01f/CVE-2021-43798★ 0githubgithub.com/MalekAlthubiany/CVE-2021-43798★ 0githubgithub.com/halencarjunior/grafana-CVE-2021-43798★ 0githubgithub.com/elsanose01/CVE-2021-43798-Grafana-path-traversal-tester★ 0githubgithub.com/0xf3d0rq/CVE-2021-43798★ 0githubgithub.com/Squ1shification/Grafana-Plugin-Enumerator-CVE-2021-43798★ 0githubgithub.com/shivamg2004/-INE_Shivam_Gupta_23104003★ 0githubgithub.com/khanna419/cve-2021-43798-lab★ 0githubgithub.com/CyberCTF/vulhub-grafana-cve-2021-43798★ 0githubgithub.com/gixxyboy/CVE-2021-43798★ 0githubgithub.com/baktistr/cve-2021-43798-enum★ 0githubgithub.com/Asbawy/GrafTraverse-CVE-2021-43798★ 0githubgithub.com/manfredgabriel/cve-2021-43798-lab★ 0githubgithub.com/Bouquets-ai/CVE-2021-43798★ 0githubgithub.com/rnsss/CVE-2021-43798-poc★ 0githubgithub.com/yasindce1998/grafana-cve-2021-43798★ 0githubgithub.com/mauricelambert/LabAutomationCVE-2021-43798★ 0githubgithub.com/victorhorowitz/grafana-exploit-CVE-2021-43798★ 0githubgithub.com/kikechans/-Grafana-LFI-CVE-2021-43798★ 0githubgithub.com/Shoxake17/CVE-2021-43798★ 0githubgithub.com/Lim-ahmin/CVE-2021-43798★ 0githubgithub.com/Jiahe114514/hdu-is-lab1-secure-api★ 0githubgithub.com/hxlxmj/Grafxploit★ 0githubgithub.com/davidrxchester/Grafana-8.3-Directory-Traversal★ 0githubgithub.com/sbimoxa/cve-2021-43798-lab★ 0githubgithub.com/Iris288/CVE-2021-43798★ 0githubgithub.com/JiuBanSec/Grafana-CVE-2021-43798★ 0githubgithub.com/BJLIYANLIANG/CVE-2021-43798-Grafana-File-Read★ 0githubgithub.com/lalkaltest/CVE-2021-43798★ 0vulncheckvulncheck.com/xdb/53511d008932unverifiedvulncheckvulncheck.com/xdb/75a7e108f33cunverifiedvulncheckvulncheck.com/xdb/8447b6dbf4c8unverifiedvulncheckvulncheck.com/xdb/a07f0a3f58a3unverifiedvulncheckvulncheck.com/xdb/da0d84f72fc7unverifiedvulncheckvulncheck.com/xdb/5fcd97bd4717unverifiedvulncheckvulncheck.com/xdb/efc519608b4cunverifiedcve_referencepacketstormsecurity.com/files/165221/Grafana-8.3.0-Directory-Traversal-Arbitrary-File-Read.htmlunverifiedvulncheckvulncheck.com/xdb/558378a73ba5unverifiedvulncheckvulncheck.com/xdb/fe083a078074unverifiedvulncheckvulncheck.com/xdb/5ef2f8e69303unverifiedvulncheckvulncheck.com/xdb/ff14ea986b7eunverifiedvulncheckvulncheck.com/xdb/aaf92101142bunverifiedvulncheckvulncheck.com/xdb/d9658825dfe1unverifiedvulncheckvulncheck.com/xdb/5963aa3ef062unverifiedvulncheckvulncheck.com/xdb/c0cccaf08786unverifiedvulncheckvulncheck.com/xdb/2a0d639ed860unverifiedvulncheckvulncheck.com/xdb/f73a10b5f83eunverifiedvulncheckvulncheck.com/xdb/5489d7843c65unverifiedvulncheckvulncheck.com/xdb/c7d6a0367ea8unverifiedvulncheckvulncheck.com/xdb/845c7456e143unverifiedvulncheckvulncheck.com/xdb/22e522f9172bunverifiedvulncheckvulncheck.com/xdb/d93ebfa49e3funverifiedvulncheckvulncheck.com/xdb/47360e2fa8a7unverifiedvulncheckvulncheck.com/xdb/236e72e66850unverifiedvulncheckvulncheck.com/xdb/76da90988455unverifiedvulncheckvulncheck.com/xdb/28282a16a3ebunverifiedvulncheckvulncheck.com/xdb/cfb186619041unverifiedvulncheckvulncheck.com/xdb/8773828620b6unverifiedvulncheckvulncheck.com/xdb/3637711ddf71unverifiedvulncheckvulncheck.com/xdb/0ed14962e0b7unverifiedvulncheckvulncheck.com/xdb/f6ae44bade08unverifiedvulncheckvulncheck.com/xdb/e53a173dd7bdunverifiedvulncheckvulncheck.com/xdb/1b40521e51f2unverifiedvulncheckvulncheck.com/xdb/05850a5fc3ecunverifiedvulncheckvulncheck.com/xdb/cd1912ebceedunverifiedvulncheckvulncheck.com/xdb/34600f7e4ec5unverifiedvulncheckvulncheck.com/xdb/b3dfc7f013ddunverifiedcve_referencepacketstormsecurity.com/files/165198/Grafana-Arbitrary-File-Reading.htmlunverifiedvulncheckvulncheck.com/xdb/6ce2a0eff0acunverifiedvulncheckvulncheck.com/xdb/1554b7478082unverifiedvulncheckvulncheck.com/xdb/b170ca520754unverifiedvulncheckvulncheck.com/xdb/fbe6b583cb86unverifiedvulncheckvulncheck.com/xdb/926b1fb39e95unverifiedvulncheckvulncheck.com/xdb/2062e832a860unverifiedvulncheckvulncheck.com/xdb/eb4d02f3b469unverifiedvulncheckvulncheck.com/xdb/30ff1fead80funverifiedvulncheckvulncheck.com/xdb/299febd83491unverifiedvulncheckvulncheck.com/xdb/0179b38de8b1unverifiedvulncheckvulncheck.com/xdb/dcbb42eac115unverifiedvulncheckvulncheck.com/xdb/3580302b2997unverifiedvulncheckvulncheck.com/xdb/937ac7ff84dfunverifiedvulncheckvulncheck.com/xdb/e7b065e3da04unverifiedvulncheckvulncheck.com/xdb/9e03c08230b1unverifiedvulncheckvulncheck.com/xdb/3e2ea3c18ff1unverifiedvulncheckvulncheck.com/xdb/43679b863e14unverifiedvulncheckvulncheck.com/xdb/f85207486217unverifiedvulncheckvulncheck.com/xdb/e7399b6a0494unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — grafana

In the same product, most dangerous first.

CVE-2021-39226CRITICALSnapshot authentication bypass in grafanaEPSS 99.9%KEVCVE-2021-41174MEDIUMXSS vulnerability allowing arbitrary JavaScript executionEPSS 85.4%CVE-2022-31097HIGHStored XSS in Grafana's Unified AlertingEPSS 70.1%CVE-2021-43813MEDIUMDirectory Traversal in GrafanaEPSS 56.6%CVE-2021-41244CRITICALCross organization admin control in GrafanaEPSS 2.9%CVE-2022-31107HIGHGrafana account takeover via OAuth vulnerabilityEPSS 2.9%