.. / CVE-2021-3374

• LFI
• Nuclei
• Web

Exploit for Rstudio Shiny Server <1.5.16 - Local File Inclusion (CVE-2021-3374)

Description:

Rstudio Shiny Server prior to 1.5.16 is vulnerable to local file inclusion and source code leakage. This can be exploited by appending an encoded slash to the URL.

Nuclei Template

View the template here CVE-2021-3374.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2021/CVE-2021-3374.yaml

References: