.. / CVE-2021-43495

• LFI
• Nuclei
• Web

Exploit for AlquistManager Local File Inclusion (CVE-2021-43495)

Description:

AlquistManager branch as of commit 280d99f43b11378212652e75f6f3159cde9c1d36 is affected by a directory traversal vulnerability in alquist/IO/input.py. This attack can cause the disclosure of critical secrets stored anywhere on the system and can significantly aid in getting remote code access.

Nuclei Template

View the template here CVE-2021-43495.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2021/CVE-2021-43495.yaml

References: