grafana-exploit-CVE-2021-43798

About

What is this exploit used for ?

• used for the Grafana Unauthorized Arbitrary File Read Vulnerability (CVE-2021-43798)
• allows access to local files using directory traversal

What grafana versions will this exploit work for?

• will work for Grafana versions 8.0.0-beta1 through 8.3.0.
  • Versions 8.07, 8.1.8, 8.2.7 and 8.3.1 are patched.

Operating System Compatibility

• this exploit was written to work on Linux targets

Disclaimer

• only use this exploit with explicit permission from the network owner
• code cannot be used to violate the law
• the author of this project is not responsible for the misuse of this code

Usage

Syntax