Skip to content

Commit c55290a

Browse files
committed
date and link on grafana dir traversal module
1 parent df47814 commit c55290a

File tree

1 file changed

+3
-2
lines changed

1 file changed

+3
-2
lines changed

modules/auxiliary/scanner/http/grafana_plugin_traversal.rb

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -26,14 +26,15 @@ def initialize(info = {})
2626
'Reliability' => [],
2727
'SideEffects' => [IOC_IN_LOGS]
2828
},
29+
'DisclosureDate' => '2021-12-02',
2930
'References' => [
3031
['CVE', '2021-43798'],
3132
['URL', 'https://github.com/grafana/grafana/security/advisories/GHSA-8pjx-jj86-j47p'],
3233
['URL', 'https://grafana.com/blog/2021/12/07/grafana-8.3.1-8.2.7-8.1.8-and-8.0.7-released-with-high-severity-security-fix/'],
3334
['EDB', '50581'],
3435
['URL', 'https://github.com/jas502n/Grafana-CVE-2021-43798'],
35-
['URL', 'https://github.com/grafana/grafana/commit/c798c0e958d15d9cc7f27c72113d572fa58545ce']
36-
36+
['URL', 'https://github.com/grafana/grafana/commit/c798c0e958d15d9cc7f27c72113d572fa58545ce'],
37+
['URL', 'https://labs.detectify.com/security-guidance/how-i-found-the-grafana-zero-day-path-traversal-exploit-that-gave-me-access-to-your-logs/']
3738
]
3839
)
3940
)

0 commit comments

Comments
 (0)