CVE-2021-46104

HIGHNuclei

webp_server_go 0.4.0 - Path Traversal

Title source: github.com
STIX 2.1 vulnerability

Record summary

CVE-2021-46104 has a selected CVSS score of 7.5 (high); EIP currently links 1 Nuclei template.

Description

An issue was discovered in webp_server_go 0.4.0. There is a directory traversal vulnerability that can read arbitrary file information on the server.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

Nuclei templates

1
ProjectDiscoveryHIGHwebp_server_go 0.4.0 - Path TraversalCVSS 7.5

webp_server_go 0.4.0 contains a path traversal caused by insufficient sanitization in file handling, letting attackers read arbitrary files on the server, exploit requires attacker to send crafted requests.

Impact

Unauthenticated attackers can read arbitrary files from the server including /etc/passwd via path traversal using double URL encoding.

Remediation

Upgrade to webp_server_go version 0.4.1 or later that properly sanitizes file paths.

WeaknessesCWE-22
Authorspikpikcu
Template tagscvecve2021lfiwebpvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CPE: cpe:2.3:a:webp:webp_server_go:0.4.0:*:*:*:*:*:*:*
Shodan: http.html:"Webp"
https://github.com/webp-sh/webp_server_go/issues/92

Source: ProjectDiscovery

References

2