Lucene search
PRIOn knowledge basePRION:CVE-2022-32275HistoryJun 06, 2022 - 7:15 p.m.
Design/Logic Flaw
2022-06-0619:15:00
PRIOn knowledge base
www.prio-n.com
5
DISPUTED Grafana 8.4.3 allows reading files via (for example) a /dashboard/snapshot/%7B%7Bconstructor.constructor’/… /… /… /… /… /… /… /… /etc/passwd URI. NOTE: the vendor’s position is that there is no vulnerability; this request yields a benign error page, not /etc/passwd content.
Related
osv
osv
BIT-grafana-2022-32275
2024-03-06 10:56:01
cvelist
cvelist
CVE-2022-32275
2022-06-06 18:29:07
nvd
nvd
CVE-2022-32275
2022-06-06 19:15:09
cve
cve
CVE-2022-32275
2022-06-06 19:15:09
vulnrichment
vulnrichment
CVE-2022-32275
2022-06-06 18:29:07
ubuntucve
ubuntucve
CVE-2022-32275
2022-06-06 00:00:00
redhatcve
redhatcve
CVE-2022-32275
2022-06-29 14:35:51
nessus
nessus
RHEL 9 : grafana (Unpatched Vulnerability)
2024-06-03 00:00:00
RHEL 8 : grafana (Unpatched Vulnerability)
2024-06-03 00:00:00
