HD-Network Real-time Monitoring System 2.0 allows ../ directory traversal to read /etc/shadow via the /language/lang s_Language parameter.
References
| Link | Resource |
|---|---|
| https://drive.google.com/file/d/1DlfZz0F8skWy3Mkahx_NMo-sYZh9-eun/view?usp=sharing | Exploit Third Party Advisory |
| https://drive.google.com/file/d/1bx9yCN-IHYuRpd7g3jhMb0LcTC1ARzSX/view?usp=sharing | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 2021-12-15 00:15
Updated : 2021-12-17 09:09
NVD link : CVE-2021-45043
Mitre link : CVE-2021-45043
JSON object : View
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Products Affected
hd-network_real-time_monitoring_system_project
- hd-network_real-time_monitoring_system


