CVE-2021-43798 Scanner
CVE-2021-43798 scanner - Path Traversal vulnerability in Grafana
Used 2.6k times · 5.9k assets checked · url
🔴
CISA Known Exploited Vulnerability
This CVE is actively exploited in the wild. CISA mandates federal agencies to patch immediately.
CVE
CVE-2021-43798
7.5
CVSShigh
Exploitable remotely over the internet · no authentication required.
Description
Grafana is an open-source platform for monitoring and observability. Grafana versions 8.0.0-beta1 through 8.3.0 (except for patched versions) iss vulnerable to directory traversal, allowing access to local files. The vulnerable URL path is: `<grafana_host_url>/public/plugins//`, where is the plugin ID for any installed plugin. At no time has Grafana Cloud been vulnerable. Users are advised to upgrade to patched versions 8.0.7, 8.1.8, 8.2.7, or 8.3.1. The GitHub Security Advisory contains more information about vulnerable URL paths, mitigation, and the disclosure timeline.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
grafana
Updated Sep 18, 2026View on NVD →
S4E scanner
CVE history: grafana
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →