CVE-2021-43798highbajo ataqueCWE-22

CVE-2021-43798: fallo de gravedad alta en grafana

Grafana path traversal

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Grafana+ Monitorear github.com/grafana/grafana

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

100Vexday Risk Score

Corrige ahora. Ella está bajo explotación confirmada por CISA y tiene exploit funcional público.

ssvc Actcvss 7.5epss 89%
de la publicación al armael mismo día
Publicada en NVD7 dic
1ª PoC6 dic
metasploit2 dic
CISA KEV+1402d
Lo que declaran los fabricantes (VEX)

Declaraciones oficiales de los fabricantes en formato CSAF/VEX: si su producto está afectado, ya corregido o descartado — y por qué. Es afirmación del fabricante, no juicio de Vexday.

Red Hatdocumento VEX ↗
No afectado
11 productos (33 componentes) — porque el código vulnerable no está presente en el producto
Red Hat Enterprise Linux 8 · OpenShift Service Mesh 2.0 · Red Hat Ceph Storage 3 · Red Hat Enterprise Linux 9 · Red Hat Ceph Storage 2 · y otros 6
Acción exigida por CISAplazo federal: 2025-10-30

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

En resumen

Grafana versiones 8.0-8.3 tiene un defecto que permite a los atacantes acceder a archivos del servidor manipulando la ruta URL del plugin. Esto omite los controles de acceso normales y podría exponer datos sensibles como archivos de configuración o credenciales.

Detalle técnico

Vulnerabilidad de path traversal en el endpoint público de plugins de Grafana permite que atacantes no autenticados lean archivos arbitrarios mediante secuencias de traversal de directorio en el parámetro de ID del plugin. La vulnerabilidad afecta a las versiones 8.0.0-beta1 hasta 8.3.0 (excluyendo versiones parcheadas) y requiere solo acceso de red al endpoint vulnerable.

Resumen generado y traducido por IA a partir de la descripción oficial.

El análisis completo de esta CVE está disponible en portugués →

Grafana is an open-source platform for monitoring and observability. Grafana versions 8.0.0-beta1 through 8.3.0 (except for patched versions) iss vulnerable to directory traversal, allowing access to local files. The vulnerable URL path is: `<grafana_host_url>/public/plugins//`, where is the plugin ID for any installed plugin. At no time has Grafana Cloud been vulnerable. Users are advised to upgrade to patched versions 8.0.7, 8.1.8, 8.2.7, or 8.3.1. The GitHub Security Advisory contains more information about vulnerable URL paths, mitigation, and the disclosure timeline.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Productos afectados
grafana · grafana
PoCs públicas encontradas — 123
exploitdbwww.exploit-db.com/exploits/50581no verificadogithubgithub.com/jas502n/Grafana-CVE-2021-43798★ 370githubgithub.com/A-D-Team/grafanaExp★ 270githubgithub.com/pedrohavay/exploit-grafana-CVE-2021-43798★ 46githubgithub.com/taythebot/CVE-2021-43798★ 43githubgithub.com/zer0yu/CVE-2021-43798★ 27githubgithub.com/Mr-xn/CVE-2021-43798★ 24githubgithub.com/MoCh3n/CVE-2021-43798-grafana_fileread★ 17githubgithub.com/ScorpionsMAX/CVE-2021-43798-Grafana-POC★ 14githubgithub.com/asaotomo/CVE-2021-43798-Grafana-Exp★ 12githubgithub.com/Mo0ns/Grafana_POC-CVE-2021-43798★ 9githubgithub.com/Sic4rio/Grafana-Decryptor-for-CVE-2021-43798★ 9githubgithub.com/kenuosec/grafanaExp★ 6githubgithub.com/rodpwn/CVE-2021-43798-mass_scanner★ 5githubgithub.com/z3n70/CVE-2021-43798★ 5githubgithub.com/wezoomagency/GrafXploit★ 4githubgithub.com/s1gh/CVE-2021-43798★ 4githubgithub.com/K3ysTr0K3R/CVE-2021-43798-EXPLOIT★ 4githubgithub.com/0xSAZZAD/Grafana-CVE-2021-43798★ 3githubgithub.com/hupe1980/CVE-2021-43798★ 3githubgithub.com/fanygit/Grafana-CVE-2021-43798Exp★ 2githubgithub.com/Jroo1053/GrafanaDirInclusion★ 2githubgithub.com/monke443/CVE-2021-43798★ 2githubgithub.com/Ryze-T/CVE-2021-43798★ 2githubgithub.com/FAOG99/GrafanaDirectoryScanner★ 1githubgithub.com/lfz97/CVE-2021-43798-Grafana-File-Read★ 1githubgithub.com/aymenbouferroum/CVE-2021-43798_exploit★ 1githubgithub.com/k3rwin/CVE-2021-43798-Grafana★ 1githubgithub.com/LongWayHomie/CVE-2021-43798★ 1githubgithub.com/wagneralves/CVE-2021-43798★ 1githubgithub.com/Okymi-X/CVE-2021-43798★ 1githubgithub.com/Strikoder-Premium/Grafana-Password-Decryptor★ 1githubgithub.com/lalkaltest/CVE-2021-43798★ 0githubgithub.com/katseyres2/CVE-2021-43798★ 0githubgithub.com/ravi5hanka/CVE-2021-43798-Exploit-for-Windows-and-Linux★ 0githubgithub.com/ticofookfook/CVE-2021-43798★ 0githubgithub.com/suljov/Grafana-LFI-exploit★ 0githubgithub.com/abuyazeen/CVE-2021-43798-Grafana-path-traversal-tester★ 0githubgithub.com/notbside/CVE-2021-43798-PoC★ 0githubgithub.com/G01d3nW01f/CVE-2021-43798★ 0githubgithub.com/MalekAlthubiany/CVE-2021-43798★ 0githubgithub.com/halencarjunior/grafana-CVE-2021-43798★ 0githubgithub.com/elsanose01/CVE-2021-43798-Grafana-path-traversal-tester★ 0githubgithub.com/0xf3d0rq/CVE-2021-43798★ 0githubgithub.com/Squ1shification/Grafana-Plugin-Enumerator-CVE-2021-43798★ 0githubgithub.com/shivamg2004/-INE_Shivam_Gupta_23104003★ 0githubgithub.com/khanna419/cve-2021-43798-lab★ 0githubgithub.com/CyberCTF/vulhub-grafana-cve-2021-43798★ 0githubgithub.com/gixxyboy/CVE-2021-43798★ 0githubgithub.com/baktistr/cve-2021-43798-enum★ 0githubgithub.com/manfredgabriel/cve-2021-43798-lab★ 0githubgithub.com/Bouquets-ai/CVE-2021-43798★ 0githubgithub.com/rnsss/CVE-2021-43798-poc★ 0githubgithub.com/yasindce1998/grafana-cve-2021-43798★ 0githubgithub.com/mauricelambert/LabAutomationCVE-2021-43798★ 0githubgithub.com/victorhorowitz/grafana-exploit-CVE-2021-43798★ 0githubgithub.com/Iris288/CVE-2021-43798★ 0githubgithub.com/kikechans/-Grafana-LFI-CVE-2021-43798★ 0githubgithub.com/Shoxake17/CVE-2021-43798★ 0githubgithub.com/Lim-ahmin/CVE-2021-43798★ 0githubgithub.com/Asbawy/GrafTraverse-CVE-2021-43798★ 0githubgithub.com/Jiahe114514/hdu-is-lab1-secure-api★ 0githubgithub.com/hxlxmj/Grafxploit★ 0githubgithub.com/davidrxchester/Grafana-8.3-Directory-Traversal★ 0githubgithub.com/sbimoxa/cve-2021-43798-lab★ 0githubgithub.com/JiuBanSec/Grafana-CVE-2021-43798★ 0githubgithub.com/BJLIYANLIANG/CVE-2021-43798-Grafana-File-Read★ 0vulncheckvulncheck.com/xdb/e7399b6a0494no verificadovulncheckvulncheck.com/xdb/75a7e108f33cno verificadovulncheckvulncheck.com/xdb/8447b6dbf4c8no verificadovulncheckvulncheck.com/xdb/a07f0a3f58a3no verificadovulncheckvulncheck.com/xdb/efc519608b4cno verificadocve_referencepacketstormsecurity.com/files/165221/Grafana-8.3.0-Directory-Traversal-Arbitrary-File-Read.htmlno verificadovulncheckvulncheck.com/xdb/558378a73ba5no verificadovulncheckvulncheck.com/xdb/fe083a078074no verificadovulncheckvulncheck.com/xdb/5ef2f8e69303no verificadovulncheckvulncheck.com/xdb/ff14ea986b7eno verificadovulncheckvulncheck.com/xdb/aaf92101142bno verificadovulncheckvulncheck.com/xdb/d9658825dfe1no verificadovulncheckvulncheck.com/xdb/5963aa3ef062no verificadovulncheckvulncheck.com/xdb/c0cccaf08786no verificadovulncheckvulncheck.com/xdb/2a0d639ed860no verificadovulncheckvulncheck.com/xdb/f73a10b5f83eno verificadovulncheckvulncheck.com/xdb/5489d7843c65no verificadovulncheckvulncheck.com/xdb/c7d6a0367ea8no verificadovulncheckvulncheck.com/xdb/845c7456e143no verificadovulncheckvulncheck.com/xdb/22e522f9172bno verificadovulncheckvulncheck.com/xdb/d93ebfa49e3fno verificadovulncheckvulncheck.com/xdb/47360e2fa8a7no verificadovulncheckvulncheck.com/xdb/236e72e66850no verificadovulncheckvulncheck.com/xdb/76da90988455no verificadovulncheckvulncheck.com/xdb/28282a16a3ebno verificadovulncheckvulncheck.com/xdb/cfb186619041no verificadovulncheckvulncheck.com/xdb/8773828620b6no verificadovulncheckvulncheck.com/xdb/3637711ddf71no verificadovulncheckvulncheck.com/xdb/0ed14962e0b7no verificadovulncheckvulncheck.com/xdb/f6ae44bade08no verificadovulncheckvulncheck.com/xdb/e53a173dd7bdno verificadovulncheckvulncheck.com/xdb/1b40521e51f2no verificadovulncheckvulncheck.com/xdb/05850a5fc3ecno verificadovulncheckvulncheck.com/xdb/cd1912ebceedno verificadovulncheckvulncheck.com/xdb/34600f7e4ec5no verificadovulncheckvulncheck.com/xdb/b3dfc7f013ddno verificadovulncheckvulncheck.com/xdb/53511d008932no verificadovulncheckvulncheck.com/xdb/6ce2a0eff0acno verificadovulncheckvulncheck.com/xdb/1554b7478082no verificadovulncheckvulncheck.com/xdb/b170ca520754no verificadovulncheckvulncheck.com/xdb/fbe6b583cb86no verificadovulncheckvulncheck.com/xdb/926b1fb39e95no verificadovulncheckvulncheck.com/xdb/2062e832a860no verificadovulncheckvulncheck.com/xdb/eb4d02f3b469no verificadovulncheckvulncheck.com/xdb/30ff1fead80fno verificadovulncheckvulncheck.com/xdb/299febd83491no verificadovulncheckvulncheck.com/xdb/0179b38de8b1no verificadovulncheckvulncheck.com/xdb/dcbb42eac115no verificadovulncheckvulncheck.com/xdb/3580302b2997no verificadovulncheckvulncheck.com/xdb/937ac7ff84dfno verificadovulncheckvulncheck.com/xdb/e7b065e3da04no verificadovulncheckvulncheck.com/xdb/9e03c08230b1no verificadovulncheckvulncheck.com/xdb/3e2ea3c18ff1no verificadovulncheckvulncheck.com/xdb/43679b863e14no verificadovulncheckvulncheck.com/xdb/f85207486217no verificadocve_referencepacketstormsecurity.com/files/165198/Grafana-Arbitrary-File-Reading.htmlno verificado
⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
CVEs relacionadas — grafana

En el mismo producto, de las más peligrosas a las menos.

CVE-2021-39226CRITICALSnapshot authentication bypass in grafanaEPSS 99.9%KEVCVE-2021-41174MEDIUMXSS vulnerability allowing arbitrary JavaScript executionEPSS 85.4%CVE-2022-31097HIGHStored XSS in Grafana's Unified AlertingEPSS 70.1%CVE-2021-43813MEDIUMDirectory Traversal in GrafanaEPSS 56.6%CVE-2021-41244CRITICALCross organization admin control in GrafanaEPSS 2.9%CVE-2022-31107HIGHGrafana account takeover via OAuth vulnerabilityEPSS 2.9%