CVE-2021-43798
1 advisory.
Go/github.com/grafana/grafana CVE-2021-43798: high 7.5, exploited
Grafana path traversal
Action: Upgrade github.com/grafana/grafana to 8.0.7 or later.
go get github.com/grafana/grafana@v8.3.1go get github.com/grafana/grafana@v8.2.7go get github.com/grafana/grafana@v8.1.8go get github.com/grafana/grafana@v8.0.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 8.3.0 | 8.3.1 | - |
| 8.2.0 | 8.2.7 | - |
| 8.1.0 | 8.1.8 | - |
| 8.0.0-beta1 | 8.0.7 | - |
Fixed versions
| 8.3.1 | 8.2.7 | 8.1.8 | 8.0.7 |
Sources
- osv: GHSA-8pjx-jj86-j47p
- kev: CVE-2021-43798
- https://github.com/grafana/grafana/security/advisories/GHSA-8pjx-jj86-j47p
- https://nvd.nist.gov/vuln/detail/CVE-2021-43798
- https://github.com/grafana/grafana/commit/c798c0e958d15d9cc7f27c72113d572fa58545ce
- https://github.com/grafana/grafana
- https://grafana.com/blog/2021/12/08/an-update-on-0day-cve-2021-43798-grafana-directory-traversal
- https://security.netapp.com/advisory/ntap-20211229-0004
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-43798
- http://packetstormsecurity.com/files/165198/Grafana-Arbitrary-File-Reading.html
- http://packetstormsecurity.com/files/165221/Grafana-8.3.0-Directory-Traversal-Arbitrary-File-Read.html
- http://www.openwall.com/lists/oss-security/2021/12/09/2
- http://www.openwall.com/lists/oss-security/2021/12/10/4
CVE-2021-43798 · published · modified · JSON