halencarjunior/grafana-cve-2021-43798Rust-based scanner for Grafana path traversal vulnerability (CVE-2021-43798). Checks hosts for the flaw and reads arbitrary files from affected Grafana instances.
Disclaimer: This is for Educational Purposes only!
All installations between v8.0.0-beta1 and v8.3.0 should be upgraded as soon as possible.
If you cannot upgrade, running a reverse proxy in front of Grafana that normalizes the PATH of the request will mitigate the vulnerability. For example, the normalize_path setting in envoy.
Thanks to our defense-in-depth approach, Grafana Cloud instances have not been affected by the vulnerability.
As always, we closely coordinated with all cloud providers licensed to offer Grafana Pro. They have received early notification under embargo and confirmed that their offerings are secure at the time of this announcement. In alphabetical order, this is applicable to Amazon Managed Grafana and Azure Managed Grafana.
$ grafana-CVE-2021-43798 [FLAGS] [OPTIONS]
-c, --check Just check for Vulnerability
--help Prints help information
-n, --nossl Use http:// instead https:// on URL
-V, --version Prints version information
-f, --file <file> File to be read on grafana server
-H, --host <Host IP or domain> Host IP or Domain and port e.g. 127.0.0.1:3000 to be checked for CVE
-h, --hostlist <hostlist> File containing a list of Hosts 1 per line with ip/domain:port e.g. 127.0.0.1:3000
First you must install Rust package on your GNU/Linux distribution, MacOS ($$$$) or Windows (blergh!)
https://www.rust-lang.org/tools/install
It is really easy to compile. Just run :
$ cargo build --release
Then you'll have the release ready in your <repo_downloaded_dir>/target/release/
That's all folks! Thank you very much.