File Reading Vulnerability in Grafana by Grafana Labs

CVE-2022-32275

Summary

Grafana 8.4.3 exhibits a file reading vulnerability that could be exploited via URI manipulation. An attacker could attempt to access sensitive files such as /etc/passwd through crafted dashboard snapshot requests. Although the vendor asserts that these actions result in benign error messages rather than actual file disclosures, the potential misuse of such a vector warrants attention to secure configurations and best practices.

References