Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:33293
HistoryDec 13, 2021 - 6:29 a.m.

Path Traversal

2021-12-1306:29:09
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
80

0.012 Low

EPSS

Percentile

85.0%

JSON

github.com/grafana/grafana is vulnerable to path traversal. The vulnerability exists in the pluginMarkdown function in plugins.go, allowing an authenticated attacker to access fully lowercase or fully uppercase ‘.md’ files outside the expected directory.

Related

cve 1
redhatcve 1
nessus 11
rocky 1
osv 5
nvd 1
freebsd 1
redhat 4
oraclelinux 1
cvelist 1
almalinux 1
prion 1
alpinelinux 1
ubuntucve 1
fedora 2
openvas 7
altlinux 2
suse 2
github 1
archlinux 1
ibm 1
cve
cve
CVE-2021-43813
2021-12-10 18:15:08
redhatcve
redhatcve
CVE-2021-43813
2021-12-13 06:03:50
nessus
nessus
Oracle Linux 8 : grafana (ELSA-2022-1781)
2022-05-18 00:00:00
AlmaLinux 8 : grafana (ALSA-2022:1781)
2022-05-12 00:00:00
Rocky Linux 8 : grafana (RLSA-2022:1781)
2023-11-07 00:00:00
rocky
rocky
grafana security, bug fix, and enhancement update
2022-05-10 06:25:23
osv
osv
Low: grafana security, bug fix, and enhancement update
2022-05-10 06:25:23
Low: grafana security, bug fix, and enhancement update
2022-05-10 06:25:23
CVE-2021-43813
2021-12-10 18:15:08
nvd
nvd
CVE-2021-43813
2021-12-10 18:15:08
freebsd
freebsd
Grafana -- Directory Traversal
2021-12-09 00:00:00
redhat
redhat
(RHSA-2022:1781) Low: grafana security, bug fix, and enhancement update
2022-05-10 06:25:23
(RHSA-2022:6024) Moderate: New container image for Red Hat Ceph Storage 5.2 Security update
2022-08-09 20:21:56
(RHSA-2022:5006) Important: Red Hat OpenShift Service Mesh 2.1.3 Containers security update
2022-06-13 12:38:39
oraclelinux
oraclelinux
grafana security, bug fix, and enhancement update
2022-05-17 00:00:00
cvelist
cvelist
CVE-2021-43813 Directory Traversal in Grafana
2021-12-10 17:30:12
almalinux
almalinux
Low: grafana security, bug fix, and enhancement update
2022-05-10 06:25:23
prion
prion
Directory traversal
2021-12-10 18:15:00
alpinelinux
alpinelinux
CVE-2021-43813
2021-12-10 18:15:08
ubuntucve
ubuntucve
CVE-2021-43813
2021-12-10 00:00:00
fedora
fedora
[SECURITY] Fedora 35 Update: grafana-7.5.11-3.fc35
2022-01-28 01:36:39
[SECURITY] Fedora 34 Update: grafana-7.5.11-3.fc34
2022-01-27 19:38:51
openvas
openvas
Grafana 5.0.0 - 8.3.1 Directory Traversal Vulnerability
2021-12-16 00:00:00
openSUSE: Security Advisory for grafana (openSUSE-SU-2022:0140-1)
2022-02-01 00:00:00
Fedora: Security Advisory for grafana (FEDORA-2022-6e6b59a682)
2022-01-28 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package grafana version 7.5.13-alt1
2022-01-31 00:00:00
Security fix for the ALT Linux 10 package grafana version 8.5.0-alt1
2022-05-05 00:00:00
suse
suse
Security update for grafana (important)
2022-01-20 00:00:00
Security update for SUSE Manager Client Tools (moderate)
2022-04-25 00:00:00
github
github
Grafana directory traversal for .cvs files
2024-05-14 22:11:20
archlinux
archlinux
[ASA-202112-11] grafana: directory traversal
2021-12-11 00:00:00
ibm
ibm
Security Bulletin: Watson Machine Learning Accelerator on Cloud Pak for Data is affected by multiple vulnerabilities in Grafana
2023-11-17 16:01:52

0.012 Low

EPSS

Percentile

85.0%

JSON
Related for VERACODE:33293
cve1redhatcve1nessus11rocky1osv5nvd1freebsd1redhat4oraclelinux1cvelist1almalinux1prion1alpinelinux1ubuntucve1fedora2openvas7altlinux2suse2github1archlinux1ibm1