CVE-2021-43496 PoC — Clustering 路径遍历漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-43496.yaml

Associated Vulnerability

Title:Clustering 路径遍历漏洞 (CVE-2021-43496)
Description:Clustering是美国Varun Suresh个人开发者的一个开源的近似秩序聚类。用于人脸验证试验。 Clustering 存在路径遍历漏洞，该漏洞源于 Clustering 主分支中的一个提交受到目录遍历漏洞的影响。

Description

Clustering master branch as of commit 53e663e259bcfc8cdecb56c0bb255bd70bfcaa70 is affected by a directory traversal vulnerability. This attack can cause the disclosure of critical secrets stored anywhere on the system and can significantly aid in getting remote code access.

File Snapshot


 id: CVE-2021-43496

info:
  name: Clustering Local File Inclusion
  author: Evan Rubinstein
  severi

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!