.. / CVE-2023-34598

• LFI
• Nuclei
• Web

Exploit for Gibbon v25.0.0 - Local File Inclusion (CVE-2023-34598)

Description:

Gibbon v25.0.0 is vulnerable to a Local File Inclusion (LFI) vulnerability where it’s possible to include the content of several files present in the installation folder in the server’s response.

Nuclei Template

View the template here CVE-2023-34598.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2023/CVE-2023-34598.yaml

References: