CVE-2021-3152 PoC — Home Assistant 路径遍历漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3152.yaml

Associated Vulnerability

Title:Home Assistant 路径遍历漏洞 (CVE-2021-3152)
Description:Home Assistant是一套开源的家庭自动化管理系统。该系统主要用于控制家庭自动化设备。 Home Assistant 2021.1.3版本之前存在路径遍历漏洞。攻击者可以利用该漏洞获取目录信息。

Description

Home Assistant before 2021.1.3 lacks a protection layer against directory-traversal attacks in custom integrations, letting attackers access arbitrary files, exploit requires attacker to deploy malicious custom integration.

File Snapshot


 id: CVE-2021-3152

info:
  name: Home Assistant HACS - Local File Inclusion
  author: DhiyaneshDk
  

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!