CVE-2017-10974
HIGH EXPLOITED NUCLEIYaws 1.91 - Unauthenticated Path Traversal via HTTP Directory Traversal with /%5C../
Title source: llmExploitation Summary
CVE-2017-10974 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 1 public exploit from researchers including hyp3rlinx. A Nuclei detection template is also available.
AI-analyzed exploit summary This exploit demonstrates an unauthenticated directory traversal vulnerability in Yaws web server v1.91, allowing remote attackers to read sensitive files such as SSL private keys and access logs via crafted HTTP requests.
Description
Yaws 1.91 allows Unauthenticated Remote File Disclosure via HTTP Directory Traversal with /%5C../ to port 8080. NOTE: this CVE is only about use of an initial /%5C sequence to defeat traversal protection mechanisms; the initial /%5C sequence was apparently not discussed in earlier research on this product.
Exploits (1)
This exploit demonstrates an unauthenticated directory traversal vulnerability in Yaws web server v1.91, allowing remote attackers to read sensitive files such as SSL private keys and access logs via crafted HTTP requests.
Nuclei Templates (1)
References (3)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N