CVE-2019-15043
HIGH NUCLEIGrafana 2.x-6.x < 6.3.4 - Unauthenticated Denial of Service via HTTP API
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2019-15043. PoCs published by h0ffayyy. A Nuclei detection template is also available.
AI-analyzed exploit summary The repository contains a Python script that checks if a Grafana server is vulnerable to CVE-2019-15043 by verifying the version number and testing if the snapshot API allows unauthenticated requests. It does not exploit the vulnerability but scans for its presence.
Description
In Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This makes it possible to run a denial of service attack against the server running Grafana.
Exploits (1)
The repository contains a Python script that checks if a Grafana server is vulnerable to CVE-2019-15043 by verifying the version number and testing if the snapshot API allows unauthenticated requests. It does not exploit the vulnerability but scans for its presence.
Nuclei Templates (1)
title:"Grafana" || cpe:"cpe:2.3:a:grafana:grafana" || http.title:"grafana"
title="grafana" || app="grafana"
References (10)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H