[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fpQAyW4zliaq9Pnn_pDtVnaSsAfxed9xbeUzMleTwUpM":3,"g5a-risk:CVE-2021-31231":120},{"success":4,"data":5,"meta":118},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":27,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":48,"references":49,"referencesCount":72,"weaknesses":73,"weaknessesCount":48,"isActivelyExploited":77,"cisaInfo":27,"otxData":27,"relatedBlogPosts":78,"seoMetadata":79,"configurations":104,"relatedVendorCves":116,"notableEvents":117},"CVE-2021-31231","What is CVE-2021-31231?","The Alertmanager in Grafana Enterprise Metrics before 1.2.1 and Metrics Enterprise 1.2.1 has a local file disclosure vulnerability when experimental.alertmanager.enable-api is used. The HTTP basic auth password_file can be used as an attack vector to send any file content via a webhook. The alertmanager templates can be used as an attack vector to send any file content because the alertmanager can load any text file specified in the templates list.","The Alertmanager in Grafana Enterprise Metrics before 1.2.1 and Metrics Enterprise 1.2.1 has a local file disclosure vulnerability when experimental.alertman...","2021-04-30T13:15:07.547","2023-08-08T14:22:24.967",5.5,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":30,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","LOCAL","LOW","NONE","UNCHANGED","HIGH","MEDIUM",null,1.8,3.6,[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":22,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":35,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":36,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:L\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",2.1,3.9,2.9,0.00277,[39,39,39,39,39,39,39],"Medium",[43],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"grafana","enterprise_metrics","*","cpe:2.3:a:grafana:enterprise_metrics:*:*:*:*:*:*:*:*",1,[50,56,60,64,67],{"url":51,"source":52,"tags":53},"https:\u002F\u002Fcommunity.grafana.com\u002Fc\u002Fsecurity-announcements","Grafana",[54,55],"Broken Link","Vendor Advisory",{"url":57,"source":52,"tags":58},"https:\u002F\u002Fgrafana.com\u002Fdocs\u002Fmetrics-enterprise\u002F",[59,55],"Product",{"url":61,"source":52,"tags":62},"https:\u002F\u002Fgrafana.com\u002Fdocs\u002Fmetrics-enterprise\u002Flatest\u002Fdownloads\u002F#v113----april-27-2021",[63,55],"Release Notes",{"url":65,"source":52,"tags":66},"https:\u002F\u002Fgrafana.com\u002Fdocs\u002Fmetrics-enterprise\u002Flatest\u002Fdownloads\u002F#v121----april-27-2021",[63,55],{"url":68,"source":69,"tags":70},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20210611-0001\u002F","Netapp",[71],"Third Party Advisory",5,[74],{"id":75,"name":75,"description":76},"Unknown","NVD-CWE-noinfo",false,[],{"title":80,"metaDescription":81,"keywords":82,"canonicalUrl":83,"structuredData":84},"What is CVE-2021-31231? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-31231, a medium severity cyber security vulnerability from 2021. The Alertmanager in Grafana Enterprise Metrics before 1.2...","CVE-2021-31231, CVE-2021-31231 vulnerability, CVE-2021-31231 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, grafana security, enterprise_metrics vulnerability","\u002Fwhat-is\u002Fcve-2021-31231",{"@context":85,"@type":86,"headline":80,"description":81,"datePublished":10,"dateModified":11,"author":87,"publisher":91,"about":95,"mainEntityOfPage":99,"articleSection":102,"keywords":103},"https:\u002F\u002Fschema.org","TechArticle",{"@type":88,"name":89,"url":90},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":88,"name":89,"url":90,"logo":92},{"@type":93,"url":94},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":96,"name":6,"description":97,"additionalType":98},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":100,"@id":101},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-31231","Cybersecurity","CVE-2021-31231, CVE-2021-31231 vulnerability, CVE-2021-31231 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[105],{"Operator":27,"Negate":27,"Nodes":106},[107],{"Operator":108,"Negate":27,"CPEMatch":109},"OR",[110,113],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":111,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":112,"VersionEndIncluding":27},"4BB20F01-714A-4510-9DCF-531232178BB1","1.2.1",{"Vulnerable":4,"Criteria":114,"MatchCriteriaID":115,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":112,"VersionEndIncluding":27},"cpe:2.3:a:grafana:enterprise_metrics:*:*:*:*:enterprise:*:*:*","8504FF5A-86A0-4C01-AE56-E1BCB5AB485F",[],[],{"lastModified":11,"cacheTime":119,"version":33},1792262417937,{"score":121,"band":122,"action":123,"scoredAt":124},18,"Info","Track","2026-10-16T06:51:02.28807+00:00"]