Exploitation Summary
EIP tracks 2 public exploits for CVE-2020-36939.
PoCs published by Jeremy Brown, Jeremy Brown, krastanoel, including Metasploit module auxiliary/scanner/http/cassandra_web_file_read.
AI-analyzed exploit summary This exploit demonstrates a directory traversal vulnerability in Cassandra Web 0.5.0, allowing remote file read via crafted HTTP requests. It bypasses Rack::Protection to access arbitrary files, including sensitive data like credentials.
Description
Cassandra Web 0.5.0 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating path traversal parameters. Attackers can exploit the disabled Rack::Protection module to read sensitive system files like /etc/passwd and retrieve Apache Cassandra database credentials.
Exploits (2)
This exploit demonstrates a directory traversal vulnerability in Cassandra Web 0.5.0, allowing remote file read via crafted HTTP requests. It bypasses Rack::Protection to access arbitrary files, including sensitive data like credentials.
This Metasploit module exploits an unauthenticated directory traversal vulnerability in Cassandra Web 0.5.0 and earlier, allowing arbitrary file read with web server privileges. The exploit sends a crafted GET request with traversal sequences to read files like /etc/passwd.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N