CVEs-PoC/2021/CVE-2021-27358.md

CVE-2021-27358

Description

The snapshot feature in Grafana 6.7.3 through 7.4.1 can allow an unauthenticated remote attackers to trigger a Denial of Service via a remote API call if a commonly used configuration is set.

POC

Reference

• https://github.com/grafana/grafana/blob/master/CHANGELOG.md
• https://github.com/grafana/grafana/blob/master/CHANGELOG.md#742-2021-02-17

Github

• https://github.com/20142995/nuclei-templates
• https://github.com/ARPSyndicate/cve-scores
• https://github.com/ARPSyndicate/cvemon
• https://github.com/ARPSyndicate/kenzer-templates
• https://github.com/kh4sh3i/Grafana-CVE