.. / CVE-2023-6021

• LFI
• Nuclei
• Web

Exploit for Ray API - Local File Inclusion (CVE-2023-6021)

Description:

LFI in Ray’s log API endpoint allows attackers to read any file on the server without authentication.

Nuclei Template

View the template here CVE-2023-6021.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2023/CVE-2023-6021.yaml

References: