cve/2021/CVE-2021-3223.md

CVE-2021-3223

Description

Node-RED-Dashboard before 2.26.2 allows ui_base/js/..%2f directory traversal to read files.

POC

Reference

No PoCs from references.

Github

• https://github.com/20142995/Goby
• https://github.com/ARPSyndicate/cvemon
• https://github.com/ARPSyndicate/kenzer-templates
• https://github.com/CLincat/vulcat
• https://github.com/HimmelAward/Goby_POC
• https://github.com/Ostorlab/KEV
• https://github.com/Ostorlab/known_exploited_vulnerbilities_detectors
• https://github.com/SexyBeast233/SecBooks
• https://github.com/Z0fhack/Goby_POC
• https://github.com/errorecho/CVEs-Collection
• https://github.com/xinyisleep/pocscan