admin/GobyVuls
1
0
Fork 0
mirror of https://github.com/gobysec/GobyVuls.git synced 2025-08-05 01:01:44 +00:00
Code Issues Packages Projects Releases Wiki Activity

Create Grafana_welcome_Arbitrary_File_Reading_Vulnerability.md

Browse Source
This commit is contained in:
之乎者也 2023-04-13 15:47:12 +08:00 committed by GitHub
parent 7c5d50865b
commit c391b1f60c
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 12 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
Grafana_welcome_Arbitrary_File_Reading_Vulnerability.md Normal file
View File

@ -0,0 +1,12 @@
## Grafana welcome Arbitrary File Reading Vulnerability
|   **Vulnerability** | **Grafana welcome Arbitrary File Reading Vulnerability** |
| :----: | :-----|
|  **Chinese name** | Grafana 网络应用程序平台 welcome 任意文件读取漏洞 |
| **CVSS core** | 7.5 |
| **FOFA Query** (click to view the results directly)| [app="Grafana_Labs-公司产品"](https://en.fofa.info/result?qbase64=YXBwPSJHcmFmYW5hX0xhYnMt5YWs5Y%2B45Lqn5ZOBIg%3D%3D) |
| **Number of assets affected** | 369673 |
| **Description** | Grafana is a cross-platform, open source platform for data visualization web applications. After users configure the connected data source, Grafana can display data graphs and warnings in a Web browser. Unauthorized attackers can exploit this vulnerability and gain access to sensitive server files. |
| **Impact** | Grafana can display graphs and warnings in a Web browser. Unauthorized attackers can exploit this vulnerability and gain access to sensitive server files. |
![](https://s3.bmp.ovh/imgs/2023/04/07/ac7eb471dfe138dc.gif)