{"id":"CVE-2021-27358","published":"2021-03-18T19:43:04Z","modified":"2024-08-03T20:48:16Z","title":"The snapshot feature in Grafana 6.7.3 through 7.4.1 can allow an unauthenticated remote attackers to trigger a Denial…","vendor":null,"product":null,"tier":"core","eol":null,"description":{"text":"The snapshot feature in Grafana 6.7.3 through 7.4.1 can allow an unauthenticated remote attackers to trigger a Denial of Service via a remote API call if a commonly used configuration is set.","provenance":"source","from":"CVE.org"},"summary":{"text":"The snapshot feature in Grafana is affected by a flaw that can be triggered through its remote API. The product and component are Grafana's snapshot functionality, with the affected range described in the source data. An unauthenticated remote attacker can make a crafted API call to cause a denial of service, but only when a commonly used configuration option is enabled.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:18:29Z"},"cvss":null,"epss":{"score":0.83042,"percentile":0.99674,"date":"2026-10-30","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2026-05-01","exploitedFirstSeen":"2026-05-01","ransomware":false,"evidence":[{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-05-01&host_type=src&vulnerability=cve-2021-27358","date":"2026-05-01"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-05-02&host_type=src&vulnerability=cve-2021-27358","date":"2026-05-02"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-05-06&host_type=src&vulnerability=cve-2021-27358","date":"2026-05-06"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-05-11&host_type=src&vulnerability=cve-2021-27358","date":"2026-05-11"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-05-13&host_type=src&vulnerability=cve-2021-27358","date":"2026-05-13"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-05-16&host_type=src&vulnerability=cve-2021-27358","date":"2026-05-16"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-05-19&host_type=src&vulnerability=cve-2021-27358","date":"2026-05-19"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-05-20&host_type=src&vulnerability=cve-2021-27358","date":"2026-05-20"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-05-23&host_type=src&vulnerability=cve-2021-27358","date":"2026-05-23"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-05-24&host_type=src&vulnerability=cve-2021-27358","date":"2026-05-24"}],"evidenceTotal":109,"provenance":"source"},"exploited":true,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[],"references":[{"url":"https://github.com/grafana/grafana/blob/master/CHANGELOG.md","tags":["x_refsource_CONFIRM"]},{"url":"https://grafana.com/docs/grafana/latest/release-notes/release-notes-7-4-2/","tags":["x_refsource_CONFIRM"]},{"url":"https://github.com/grafana/grafana/blob/master/CHANGELOG.md#742-2021-02-17","tags":["x_refsource_CONFIRM"]},{"url":"https://security.netapp.com/advisory/ntap-20210513-0007/","tags":["x_refsource_CONFIRM"]}],"techniques":[],"reports":[],"affected":[{"ecosystem":"Go","package":"github.com/grafana/grafana","vulnerableRanges":[">=6.7.3, <7.4.2"],"patched":["7.4.2"],"from":["GHSA-h5rh-w6vm-9ghc"],"provenance":"source"}],"advisories":[{"id":"GHSA-h5rh-w6vm-9ghc","url":"https://github.com/advisories/GHSA-h5rh-w6vm-9ghc","severity":"MODERATE","ecosystem":"Go","package":"github.com/grafana/grafana","vulnerableRanges":[">=6.7.3, <7.4.2"],"patched":["7.4.2"],"provenance":"source","from":"GHSA"}],"euvd":{"id":"EUVD-2022-1033","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-1033","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":{"nuclei":[{"id":"CVE-2021-27358","name":"Grafana Unauthenticated Snapshot Creation","severity":"high","path":"http/cves/2021/CVE-2021-27358.yaml","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27358.yaml"}],"provenance":"source"},"exploitRefs":[],"flow":[],"timeline":[{"date":"2021-03-18","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2021-27358","provenance":"source"},{"date":"2026-05-01","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-05-01&host_type=src&vulnerability=cve-2021-27358","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":64.9,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":5.0,"detail":"added 183 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.93,"detail":"percentile 0.9967"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 nuclei template"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]},"lineage":{"packageHistory":[{"cve":"CVE-2020-24303","published":"2020-10-28","fixed":"7.1.0-beta1","kev":false},{"cve":"CVE-2020-12458","published":"2020-04-29","fixed":"7.2.1","kev":false},{"cve":"CVE-2020-12459","published":"2020-04-29","fixed":"7.2.1","kev":false,"link":{"from":"CVE-2020-12459","to":"CVE-2021-27358","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Go:github.com/grafana/grafana","fromFixed":"7.2.1","toFixed":"7.4.2","daysApart":323}]}},{"cve":"CVE-2021-27358","published":"2021-03-18","fixed":"7.4.2","kev":false},{"cve":"CVE-2021-39226","published":"2021-10-05","fixed":"8.1.6","kev":true,"link":{"from":"CVE-2021-27358","to":"CVE-2021-39226","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Go:github.com/grafana/grafana","fromFixed":"7.4.2","toFixed":"7.5.11","daysApart":201}]}},{"cve":"CVE-2021-41244","published":"2021-11-15","fixed":"8.2.4","kev":false},{"cve":"CVE-2021-43798","published":"2021-12-07","fixed":"8.3.1","kev":true}],"package":"Go:github.com/grafana/grafana"}}