CVE-2021-43798 is a high-severity path traversal vulnerability (CVSS 3.1 score: 7.5) affecting Grafana versions 8.0.0-beta1 through 8.3.0. It allows unauthenticated attackers to read arbitrary files from the server by exploiting improper sanitization in the /public/plugins/:pluginId endpoint
Grafanav8.*版本任意文件读取漏洞批量检测工具：该漏洞目前为0day漏洞，未授权的攻击者利用该漏洞，能够获取服务器敏感文件。
CVE-2021-43798 MiNi Exploitation Framework
Proof-of-concept exploit for Grafana unauthorized file read (CVE-2021-43798), demonstrating path traversal to read arbitrary files, with a Nuclei template for automated scanning.
Batch verification script for CVE-2021-43798 in Grafana, written in Go, with 48 built-in checks to identify vulnerable instances and download the database file.
Multi-threaded batch exploit script for Grafana arbitrary file read vulnerability (CVE-2021-43798). Automates path traversal payloads to extract sensitive server files from vulnerable Grafana instances.
Rust-based scanner for Grafana path traversal vulnerability (CVE-2021-43798). Checks hosts for the flaw and reads arbitrary files from affected Grafana instances.
Grafana - Directory Traversal and Arbitrary File Read
Grafana Unauthorized arbitrary file reading vulnerability
Script to demonstrate the Grafana directory traversal exploit (CVE-2021-43798).
利用grafan CVE-2021-43798任意文件读漏洞，自动探测是否有漏洞、存在的plugin、提取密钥、解密server端db文件，并输出data_sourrce信息。
Proof-of-concept exploit for Grafana arbitrary file reading vulnerability (CVE-2021-43798) affecting versions 8.0.0 to 8.3.0, demonstrating unauthorized access to sensitive files via path traversal.
CVE-2021-43798-Grafana任意文件读取漏洞
Proof-of-concept exploit for Grafana path traversal vulnerability (CVE-2021-43798) allowing unauthorized file read via directory traversal in plugin paths.
CVE-2021-43798 is a vulnerability marked as High priority (CVSS 7.5) leading to arbitrary file read via installed plugins in Grafana application.
Exploit for CVE-2021-43798, a Grafana directory traversal vulnerability, enabling unauthenticated arbitrary file reads via crafted curl commands.
This script implements a lab automation where I exploit CVE-2021-43798 to steal user secrets and then gain privileges on a Linux system.
grafana CVE-2021-43798 arbitrary file read vulnerability POC, using a multi-plugin polling detection method, allows specifying a single URL and reading URLs from a file.
Arbitrary file read in Grafana allows an attacker to read server files by abusing a path traversal.
Python toolkit for authorized testing of CVE-2021-43798 Grafana path traversal, with arbitrary file read PoC, secret decryption, and user hash export for security assessments.
This is a proof-of-concept exploit for Grafana's Unauthorized Arbitrary File Read Vulnerability (CVE-2021-43798).
Modified exploit for CVE-2021-43798 compatible with both Windows and Linux hosts.
Mass scanner for Grafana CVE-2021-43798 unauthorized file read, supporting single targets, hostname lists, and IP ranges with PoC verification.
CVE-2021-43798 Grafana Unauthenticated Path Traversal - Security Lab | Shivam Gupta | 23104003
Updated exploit script for the CVE-2021-43798
CVE-2021-43798 - Grafana 8.x Path Traversal (Pre-Auth)
Proof-of-concept exploit for CVE-2021-43798, a Grafana directory traversal vulnerability. Automates exploitation with a Python script to read arbitrary files on affected servers.
Shell-based exploit for Grafana CVE-2021-43798, enabling unauthorized arbitrary file read via directory traversal on versions 8.0.0-beta1 through 8.3.0.
Exploit for Grafana LFI vulnerability CVE-2021-43798 enabling unauthorized file reading via path traversal in plugin endpoints.
Directory Traversal and Arbitrary File Read on Grafana
Automated Exploit Tool for Grafana CVE-2021-43798: Scanning common files that contain juicy informations and extracting SSH keys from compromised users.
Grafana Arbitrary File Reading Vulnerability
A exploit tool for Grafana Unauthorized arbitrary file reading vulnerability (CVE-2021-43798), it can burst plugins / extract secret_key / decrypt data_source info automatic.
Automated path traversal testing tool for Grafana plugin endpoints using curl and Bash.
Exploit for grafana CVE-2021-43798
📂 Grafana LFI Exploit (CVE-2021-43798). Extracción automatizada de credenciales y configuración. 🕵️
Bash-based scanner that enumerates Grafana plugin IDs and tests for CVE-2021-43798 directory traversal by attempting to read /etc/passwd or win.ini on vulnerable instances.
Python implementation of a tool for decrypting and encrypting sensitive data in Grafana, specifically addressing the vulnerabilities associated with CVE-2021-43798. Grafana encrypts all data source passwords using the AES algorithm with the secret_key found in the defaults.ini configuration file.
Exploit for Grafana directory traversal (CVE-2021-43798) allowing local file read via crafted plugin path. Includes usage instructions and references.
Enumerates systems vulnerable to CVE-2021-43798, aiding in security assessment and penetration testing.
CVE-2021-43798 working exploit
Python exploit for CVE-2021-43798, a Grafana path traversal vulnerability enabling arbitrary file read via directory traversal in plugin URLs.
Exploit for CVE-2021-43798, a path traversal vulnerability in Grafana, enabling unauthorized file read on affected servers.
Automated Exploit Tool for Grafana CVE-2021-43798: Scanning common files that contain juicy informations and extracting SSH keys from compromised users.
Exploit for Grafana directory traversal (CVE-2021-43798) with Burp Suite integration and payload automation for accessing local files on vulnerable instances.
Grafana File-Read Vuln
Python-based exploit for CVE-2021-43798, enabling arbitrary file read on Grafana instances with 49 proof-of-concept payloads and batch scanning support.
Proof-of-concept exploit for CVE-2021-43798, a Grafana directory traversal vulnerability enabling unauthorized file read on affected instances.
Grafana-POC任意文件读取漏洞(CVE-2021-43798)
CVE-2021-43798:Grafana 任意文件读取漏洞
Proof-of-concept exploit for Grafana 8.x arbitrary file read vulnerability (CVE-2021-43798), allowing retrieval of sensitive files via crafted URL.
Grafana8.x 任意文件读取
Python exploit script for CVE-2021-43798, a Grafana path traversal vulnerability, enabling arbitrary file read from the target server.
Python Exploit Code
CVE-2021-43798 Grafana 任意文件读取漏洞 POC+参数
Exploit for Grafana directory traversal (CVE-2021-43798) allowing unauthorized file read via crafted HTTP requests.
Decrypts Grafana DataSource passwords by exploiting CVE-2021-43798 directory traversal to retrieve configuration files and derive encryption keys.
Python toolkit for decrypting AES-256 and cracking PBKDF2 passwords from Grafana databases usually paired with (CVE-2021-43798)
This repository contains files for reproducing the vulnerability.
Simple program for exploit grafana
s1gh · multiple · Dec 9, 2021
