CVE-2022-32275

Published: 2022-06-06T19:15Z

Last Modified: 2024-11-21T07:06Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Grafana 8.4.3 allows reading files via (for example) a /dashboard/snapshot/%7B%7Bconstructor.constructor'/.. /.. /.. /.. /.. /.. /.. /.. /etc/passwd URI. NOTE: the vendor's position is that there is no vulnerability; this request yields a benign error page, not /etc/passwd content > MITRE Terms of Use apply – see LICENSE‑MITRE.txt