Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2019-19499] Grafana 6.4.3 Arbitrary File Read

swarm.ptsecurity.com | research | CVE-2019-19499 | #vulnerability-research | #cve | #mysql | #grafana | #file-read

Summary

CVE-2019-19499 in Grafana 6.4.3: a rogue MySQL data source answers LOCAL INFILE requests to exfiltrate arbitrary files from the Grafana host, turning the 'add a data source' feature into an authenticated arbitrary file read.
Published
Collected

original ↗

Related coverage

  1. Vulnerabilities in the Openfire Admin Console (swarm.ptsecurity.com)
  2. Three Critical RCE Vulnerabilities in Microsoft Software Identified Autonomously by XBOW (xbow.com)
  3. How to Chain Vulnerabilities for RCE: From Image Metadata to Complete System Compromise (hackenproof.com)
  4. dinosn/givewp-cve-2026-82222-rce-lab: GiveWP CVE-2026-82222 RCE Docker Lab & PoC (github.com)
  5. Check Your Motor Oil Before Turbocharging: CVE-2026-7899, When V8's Optimization Engine Builds Up Carbon (nebusec.ai)
  6. CVE-2026-15748 — WPMU DEV Forminator Forms Select Field Injection Unrestricted File Upload (aretiq.ai)

back