Grafana 8.x
highCVSS 8.6
Path traversal in the plugin endpoint allows reading arbitrary files without authentication.
Dampak
Disclosure of grafana.ini, database credentials and provisioning secrets.
Perbaikan
Upgrade to 8.3.1, 8.2.7, 8.1.8 or 8.0.7 and restrict network access to Grafana.
Referensi resmi
https://nvd.nist.gov/vuln/detail/CVE-2021-43798Apakah situs Boss terdampak?
VulScan Pro mencocokkan versi komponen yang terdeteksi dengan CVE yang relevan, termasuk CVE-2021-43798.
Jalankan audit gratis