.. / CVE-2023-6020

• LFI
• Nuclei
• Web

Exploit for Ray Static File - Local File Inclusion (CVE-2023-6020)

Description:

LFI in Ray’s /static/ directory allows attackers to read any file on the server without authentication.

Nuclei Template

View the template here CVE-2023-6020.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2023/CVE-2023-6020.yaml

References: