rConfig 3.9.6 is affected by a Local File Disclosure vulnerability. An authenticated user may successfully download any file on the server.
View the template here CVE-2021-29006.yaml
echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2021/CVE-2021-29006.yaml
References: