Arbitrary file deletion

2021-10-1113:15:00

PRIOn knowledge base

www.prio-n.com

6.3 Medium

AI Score

Confidence

High

0.061 Low

EPSS

Percentile

93.6%

rConfig 3.9.6 is affected by a Local File Disclosure vulnerability. An authenticated user may successfully download any file on the server.

CPENameOperatorVersion
rconfigeq3.9.6

CPE	Name	Operator	Version
	rconfig	eq	3.9.6

References

rconfig.com

github.com/mrojz/rconfig-exploit/blob/main/CVE-2021-29006-POC.py