.. / CVE-2021-26292

• Info Disclosure
• Nuclei
• Web

Exploit for AfterLogic Aurora and WebMail Pro < 7.7.9 - Full Path Disclosure (CVE-2021-26292)

Description:

AfterLogic Aurora and WebMail Pro products with 7.7.9 and all lower versions are affected by this vulnerability, simply sending an HTTP DELETE request to WebDAV EndPoint with built-in “caldav_public_user@localhost” and it’s the predefined password “caldav_public_user” allows the attacker to obtain web root path.

Nuclei Template

View the template here CVE-2021-26292.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2021/CVE-2021-26292.yaml

References: