CVE-2023-5123

CVE-2023-5123 is a path traversal vulnerability affecting the Grafana Labs JSON datasource plugin for Grafana. Inadequate sanitization of the dashboard-supplied path parameter allows an attacker to include path traversal characters (../) to access arbitrary subpaths on a configured domain. This vulnerability has a CVSS score of 8.0 (High), indicating a low attack complexity and the potential for high impact on confidentiality, integrity, and availability, particularly if the plugin points back to the Grafana instance itself, leading to potential privilege escalation. There is currently no evidence of active exploitation, public exploit code, or significant community discussion.