Exploit for Path Traversal in Wazuh

CVE-2021-26814 A simple python PoC to exploit CVE-2021-2681...

Exploit for Path Traversal in Wazuh

CVE-2021-26814 A simple python PoC to exploit CVE-2021-2681...

CVE-2021-26814

Wazuh API in Wazuh from 4.0.0 to 4.0.3 allows authenticated users to execute arbitrary code with administrative privileges via /manager/files URI. An authenticated user to the service may exploit incomplete input validation on the /manager/files API to inject arbitrary code within the API service...

CVE-2021-26814

CVE-2021-26814 affects Wazuh API (versions 4.0.0–4.0.3); an authenticated user can trigger arbitrary code execution with admin privileges via the /manager/files API due to incomplete input validation. Public Red Hat and CVE trackers confirm the condition and references note a fixed release (4.0.4...