amalpvatayam67/day05-grafana-sqlexpr-lab
PoCGrafana SQL Expressions → DuckDB LFI (CVE-2024-9264)
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-9264US | high8.8 | Exploit | ||
The SQL Expressions experimental feature of Grafana allows for the evaluation of `duckdb` queries containing user input. These queries are insufficiently sanitized before being pas… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan