All verified exploits

CVE-2021-43798 Plugin Path Traversal

CVE-2021-43798 is a critical-severity vulnerability, listed in the CISA KEV catalog. AttackerView checks Grafana sites for it with a live exploit check.

Deterministic critical Grafana CISA KEV Added 8mo ago cve-verified-cve-2021-43798

Is my site vulnerable to CVE-2021-43798?

Reads /etc/passwd through Grafana's plugin static file serving, which fails to sanitize path traversal sequences in the plugin ID path.

Related Grafana exploits

Is your app exploitable through CVE-2021-43798?

Scan your domain free