Internet-Security-Project---CVE-2021-26814

Internet-Security-Project---CVE-2021-26814 Internet Security project, for my exam at University of Catania, in wich you can learn how to exploit one vulnerability of Wazuh v4.0.3 and how this vulnerability can be fixed. Link to script original repo: https://github.com/WickdDavid/CVE-2021-26814...

Exploit for Path Traversal in Wazuh

CVE-2021-26814 A simple python PoC to exploit CVE-2021-2681...

Exploit for Path Traversal in Wazuh

CVE-2021-26814 A simple python PoC to exploit CVE-2021-2681...

CVE-2021-26814

Wazuh API in Wazuh from 4.0.0 to 4.0.3 allows authenticated users to execute arbitrary code with administrative privileges via /manager/files URI. An authenticated user to the service may exploit incomplete input validation on the /manager/files API to inject arbitrary code within the API service...

CVE-2021-26814

CVE-2021-26814 affects Wazuh API (versions 4.0.0–4.0.3); an authenticated user can trigger arbitrary code execution with admin privileges via the /manager/files API due to incomplete input validation. Public Red Hat and CVE trackers confirm the condition and references note a fixed release (4.0.4...