.. / CVE-2020-24571

• LFI
• Nuclei
• Web

Exploit for NexusDB <4.50.23 - Local File Inclusion (CVE-2020-24571)

Description:

NexusQA NexusDB before 4.50.23 allows the reading of files via ../ directory traversal and local file inclusion.

Nuclei Template

View the template here CVE-2020-24571.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2020/CVE-2020-24571.yaml

References: