Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2021-43798 — Arbitrary file read in Grafana allows an attacker to read server files by abusing a path traversal. | Kitploit
Tools/GitHubGitHub/monke443/cve-2021-43798
Vulnerability AnalysisExploitationWeb Application ExploitationInformation GatheringLearning & Education
GitHubmonke443/cve-2021-43798

CVE-2021-43798

Arbitrary file read in Grafana allows an attacker to read server files by abusing a path traversal.

View Repository
21 year agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2021-43798 Grafana-Arbitrary-File-Read (8.0.0 ~~ 8.3.0)

A vulnerability in Grafana (CVE-2021-43798) versions 8.0.0 ~~ 8.3.0 that allows an unauthenticated attacker to read arbitrary files from the server by leveraging a path traversal aimed towards the /public/plugins/<plugin> path to access sensitive files on the system.

Usage

python3 exploit.py --domain <example.com> --port <PORT>

  1. The script automatically tests a lit of possibly vulnerable paths
  2. Interactive Shell: Once a vulnerable endpoint is found, the script prompts for a file path to read form the server.

Shell Example:

image

References

CVE-2021-43789.

Disclaimer This script is for educational purposes.

Download Tool