Path traversal in Grafana - CVE-2022-32275

Vulnerability details

The vulnerability allows a remote user to perform directory traversal attacks.

The vulnerability exists due to input validation error when processing directory traversal sequences. A remote user can send a specially crafted HTTP request and read arbitrary files on the system.

Exploitation example:
/dashboard/snapshot/%7B%7Bconstructor.constructor'/.. /.. /.. /.. /.. /.. /.. /.. /etc/passwd

Affected software

How to mitigate CVE-2022-32275

Links to Public Exploits and PoC-codes

• Exploit #8329 - Grafana-CVE (a Curated list of Grafana Security Vulnerabilities, CVE & exploit) (September 3, 2022)

External References

• https://github.com/BrotherOfJhonny/grafana/blob/main/README.md
• https://github.com/grafana/grafana/issues/50336

Related Security Bulletins

• Path traversal in Grafana
• Multiple vulnerabilities in IBM Watson Machine Learning Accelerator on Cloud Pak for Data
• Multiple vulnerabilities in Dell ObjectScale