CVE-2021-30497

creationtimestamp| type| source ---|---|--- 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-30497.yaml 2024-01-16 05:35:28+00:00| seen| https://t.me/arpsyndicate/2829 2024-10-31 00:00:00+00:00| exploited| The Shadowserve...

CVE-2021-30497

Ivanti Avalanche 6.3.2 on Premise is affected by CVE-2021-30497: a Local/File Inclusion/Absolute Path Traversal flaw in the /AvalancheWeb/image endpoint allows remote, unauthenticated users to read arbitrary files (e.g., C:\Windows\system32\config\system.sav) due to imageFilePath not being valida...