# Exploitation

> Read files unauthenticated via path traversal CVE-2021-43798

- **URL:** https://hackindex.io/services/grafana/exploitation
- **Service:** [Grafana](https://hackindex.io/services/grafana.md)
- **Published:** 2026-09-14
- **Updated:** 2026-09-14

## Guides

- [Grafana Directory Traversal (CVE-2021-43798)](https://hackindex.io/services/grafana/exploitation/grafana-directory-traversal-cve-2021-43798.md): Exploits Grafana's path traversal flaw to read arbitrary files outside the web root via crafted plugin endpoint requests, bypassing authentication.