Internet-Security-Project---CVE-2021-26814

Internet-Security-Project---CVE-2021-26814 Internet-Security-Projekt für meine Prüfung an der Universität Catania, in dem du lernen kannst, wie man eine Schwachstelle von Wazuh v4.0.3 ausnutzt und wie diese Schwachstelle behoben werden kann. Link zum ursprünglichen Repo des Skripts:...

Exploit for Path Traversal in Wazuh

CVE-2021-26814 A simple python PoC to exploit CVE-2021-2681...

Exploit for Path Traversal in Wazuh

CVE-2021-26814 A simple python PoC to exploit CVE-2021-2681...

CVE-2021-26814

Wazuh API in Wazuh from 4.0.0 to 4.0.3 allows authenticated users to execute arbitrary code with administrative privileges via /manager/files URI. An authenticated user to the service may exploit incomplete input validation on the /manager/files API to inject arbitrary code within the API service...

CVE-2021-26814

CVE-2021-26814 affects Wazuh API (versions 4.0.0–4.0.3); an authenticated user can trigger arbitrary code execution with admin privileges via the /manager/files API due to incomplete input validation. Public Red Hat and CVE trackers confirm the condition and references note a fixed release (4.0.4...