THREATOPS

THREAT OPS › CVEs › CVE-2021-43798

CVE-2021-43798 — Grafana Path Traversal Vulnerability

CISA KEVExploited: confirmedGrafana Labs

Grafana contains a path traversal vulnerability that could allow access to local files.

Vulnerability details

Affected productsGrafana
KEV remediation due2025-10-30

Related reporting

Coordinated Grafana Exploitation Attempts on 28 Septembergreynoise_blog