CVE-2020-13379
HIGH EXPLOITED IN THE WILD NUCLEIGrafana 3.0.1-7.0.1 - Unauthenticated Server-Side Request Forgery via Avatar Feature
Title source: llmExploitation Summary
CVE-2020-13379 has been observed exploited in the wild (reported by VulnCheck KEV, InTheWild.io). EIP tracks 2 public exploits from researchers including mostwanted002, vadimgggg. A Nuclei detection template is also available.
AI-analyzed exploit summary This script exploits a Denial of Service (DoS) vulnerability in Grafana by sending a crafted request to the avatar endpoint, causing the server to crash due to improper handling of template injection.
Description
The avatar feature in Grafana 3.0.1 through 7.0.1 has an SSRF Incorrect Access Control issue. This vulnerability allows any unauthenticated user/client to make Grafana send HTTP requests to any URL and return its result to the user/client. This can be used to gain information about the network that Grafana is running on. Furthermore, passing invalid URL objects could be used for DOS'ing Grafana via SegFault.
Exploits (2)
exploitdb
WORKING POC
by mostwanted002 · bashdoslinux
https://www.exploit-db.com/exploits/48638
This script exploits a Denial of Service (DoS) vulnerability in Grafana by sending a crafted request to the avatar endpoint, causing the server to crash due to improper handling of template injection.
Classification
Working Poc 90%
Attack Type
Dos
Complexity
Trivial
Reliability
Reliable
Target:
Grafana 3.0.1 - 7.0.1
No auth needed
Prerequisites:
Target Grafana instance URL
MITRE ATT&CK
mistral-large-3 · analyzed Feb 16, 2026
Full analysis →
github
WORKING POC
1 stars
by vadimgggg · pythonpoc
https://github.com/vadimgggg/CVE-PoC/tree/main/CVE-2020-13379
This repository contains a functional exploit for CVE-2020-13379, an SSRF vulnerability in Grafana. The exploit leverages a crafted URL to bypass access controls and perform SSRF attacks.
Classification
Working Poc 90%
Attack Type
Ssrf
Complexity
Trivial
Reliability
Reliable
Target:
Grafana 5.4.3
No auth needed
Prerequisites:
Docker environment · Access to the target Grafana instance
mistral-large-3 · analyzed Feb 27, 2026
Full analysis →
Nuclei Templates (1)
Grafana 3.0.1-7.0.1 - Server-Side Request Forgery
HIGHVERIFIEDby Joshua Rogers
Shodan:
title:"Grafana" || cpe:"cpe:2.3:a:grafana:grafana" || http.title:"grafana"
FOFA:
title="grafana" || app="grafana"
References (28)
Core 28
Core References
Release Notes, Vendor Advisory x_refsource_misc
https://community.grafana.com/t/release-notes-v6-7-x/27119
Mailing List, Third Party Advisory x_refsource_confirm
http://www.openwall.com/lists/oss-security/2020/06/03/4
Vendor Advisory x_refsource_misc
https://community.grafana.com/t/grafana-7-0-2-and-6-7-4-security-update/31408
Vendor Advisory x_refsource_confirm
https://grafana.com/blog/2020/06/03/grafana-6.7.4-and-7.0.2-released-with-important-security-fix/
Release Notes, Vendor Advisory x_refsource_misc
https://community.grafana.com/t/release-notes-v7-0-x/29381
Third Party Advisory x_refsource_confirm
https://security.netapp.com/advisory/ntap-20200608-0006/
Mailing List, Third Party Advisory mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2020/06/09/2
Mailing List, Third Party Advisory vendor-advisory
x_refsource_fedora
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O2KSCCGKNEENZN3DW7TSPFBBUZH3YZXZ/
Mailing List, Third Party Advisory vendor-advisory
x_refsource_fedora
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EEKSZ6GE4EDOFZ23NGYWOCMD6O4JF5SO/
Mailing List, Third Party Advisory vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00060.html
Exploit, Third Party Advisory x_refsource_misc
https://mostwanted002.cf/post/grafanados/
Exploit, Third Party Advisory, VDB Entry x_refsource_misc
http://packetstormsecurity.com/files/158320/Grafana-7.0.1-Denial-Of-Service.html
Mailing List, Third Party Advisory vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00083.html
Exploit, Third Party Advisory x_refsource_misc
https://rhynorater.github.io/CVE-2020-13379-Write-Up
Mailing List mailing-list
x_refsource_mlist
https://lists.apache.org/thread.html/re75f59639f3bc1d14c7ab362bc4485ade84f3c6a3c1a03200c20fe13%40%3Cissues.ambari.apache.org%3E
Mailing List mailing-list
x_refsource_mlist
https://lists.apache.org/thread.html/r6bb57124a21bb638f552d81650c66684e70fc1ff9f40b6a8840171cd%40%3Cissues.ambari.apache.org%3E
Mailing List, Third Party Advisory vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00009.html
Mailing List, Third Party Advisory vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00017.html
Mailing List mailing-list
x_refsource_mlist
https://lists.apache.org/thread.html/r40f0a97b6765de6b8938bc212ee9dfb5101e9efa48bcbbdec02b2a60%40%3Cissues.ambari.apache.org%3E
Mailing List mailing-list
x_refsource_mlist
https://lists.apache.org/thread.html/r093b405a49fd31efa0d949ac1a887101af1ca95652a66094194ed933%40%3Cdev.ambari.apache.org%3E
Mailing List mailing-list
x_refsource_mlist
https://lists.apache.org/thread.html/rba0247a27be78bd14046724098462d058a9969400a82344b3007cf90%40%3Cdev.ambari.apache.org%3E
Mailing List mailing-list
x_refsource_mlist
https://lists.apache.org/thread.html/rff71126fa7d9f572baafb9be44078ad409c85d2c0f3e26664f1ef5a2%40%3Cdev.ambari.apache.org%3E
Mailing List mailing-list
x_refsource_mlist
https://lists.apache.org/thread.html/re7c4b251b52f49ba6ef752b829bca9565faaf93d03206b1db6644d31%40%3Cdev.ambari.apache.org%3E
Mailing List mailing-list
x_refsource_mlist
https://lists.apache.org/thread.html/rad99b06d7360a5cf6e394afb313f8901dcd4cb777aee9c9197b3b23d%40%3Cdev.ambari.apache.org%3E
Mailing List mailing-list
x_refsource_mlist
https://lists.apache.org/thread.html/r0928ee574281f8b6156e0a6d0291bfc27100a9dd3f9b0177ece24ae4%40%3Cdev.ambari.apache.org%3E
Mailing List mailing-list
x_refsource_mlist
https://lists.apache.org/thread.html/rd0fd283e3844b9c54cd5ecc92d966f96d3f4318815bbf3ac41f9c820%40%3Ccommits.ambari.apache.org%3E
Mailing List mailing-list
x_refsource_mlist
https://lists.apache.org/thread.html/r6670a6c29044bcb77d4e5d165b5bd13fffe37b84caa5d6471b13b3a2%40%3Cdev.ambari.apache.org%3E
Mailing List mailing-list
x_refsource_mlist
https://lists.apache.org/thread.html/r984c3b42a500f5a6a89fbee436b9432fada5dc27ebab04910aafe4da%40%3Cissues.ambari.apache.org%3E
Scores
CVSS v3
8.2
EPSS
0.9986
EPSS Percentile
100.0%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Details
VulnCheck KEV
2024-03-07
InTheWild.io
2021-04-18
CWE
CWE-918
Status
published
Products (7)
fedoraproject/fedora
31
fedoraproject/fedora
32
grafana/grafana
3.0.1 - 6.7.4Go
grafana/grafana
3.0.1 - 7.0.1
netapp/e-series_performance_analyzer
opensuse/backports_sle
15.0 sp1 (2 CPE variants)
opensuse/leap
15.2
Published
Jun 03, 2020
Tracked Since
Feb 18, 2026