cve/CVE-2021-37445.md at 93476d6c370e261fdc1b2b03a08066de45e4892d - cve - 临风笛

admin/cve

mirror of https://github.com/0xMarcio/cve.git synced 2025-11-30 18:56:19 +00:00

0xMarcio 48a00929ac Removed duplicates

2024-06-18 02:51:15 +02:00

605 B

Raw Blame History

CVE-2021-37445

Description

In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via logprop?file=/.. for file reading.

POC

Reference

https://github.com/0xfml/poc/blob/main/NCH/Quorum_2.03_LFI.md

Github

No PoCs found on GitHub currently.