u238/grafana-CVE-2018-15727

PoC

a small utility to generate a cookie in order to exploit a grafana vulnerability (CVE-2018-15727)

view exploit source poc_in_githubauthor u238published 2018-08-29catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2018-15727US	critical9.8	64.3% (99th)	Exploit	2018-08-29
Grafana 2.x, 3.x, and 4.x before 4.6.4 and 5.x before 5.2.3 allows authentication bypass because an attacker can generate a valid "remember me" cookie knowing only a username of an…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.