CVE-2021-33558
HIGH EXPLOITED IN THE WILD RANSOMWARE NUCLEIBoa 0.94.13 - Information Disclosure via Misconfigured Backup Files
Title source: llmExploitation Summary
CVE-2021-33558 has been observed exploited in the wild (reported by VulnCheck KEV, InTheWild.io), including in ransomware campaigns. EIP tracks 2 public exploits from researchers including mdanzaruddin, anldori. A Nuclei detection template is also available.
AI-analyzed exploit summary This repository provides a proof-of-concept for CVE-2021-33558, an information disclosure vulnerability in Boa/0.94.13. The exploit demonstrates access to sensitive files via direct URL requests.
Description
Boa 0.94.13 allows remote attackers to obtain sensitive information via a misconfiguration involving backup.html, preview.html, js/log.js, log.html, email.html, online-users.html, and config.js. NOTE: multiple third parties report that this is a site-specific issue because those files are not part of Boa.
Exploits (2)
This repository provides a proof-of-concept for CVE-2021-33558, an information disclosure vulnerability in Boa/0.94.13. The exploit demonstrates access to sensitive files via direct URL requests.
The repository lacks functional exploit code and instead provides a list of URLs and images without technical details. It appears to be a placeholder or lure rather than a legitimate PoC.
Nuclei Templates (1)
Server: Boa/0.94.13
Server: Boa/0.94.13
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N