CVE-2024-56331

CVE-2024-56331 Uptime-Kuma : Inclusione Locale di File LFI tramite Gestione Impropria degli URL nel monitor Real-Browser Riepilogo Una Vulnerabilità di Gestione Impropria degli URL permette a un attaccante di accedere a file locali sensibili sul server sfruttando il protocollo file:///. Questa...

CVE-2024-56331 Local File Inclusion (LFI) via Improper URL Handling in uptime-kuma's `Real-Browser` monitor

Uptime Kuma is an open source, self-hosted monitoring tool. An Improper URL Handling Vulnerability allows an attacker to access sensitive local files on the server by exploiting the file:/// protocol. This vulnerability is triggered via the "real-browser" request type, which takes a screenshot of...

uptime-kuma vulnerable to Local File Inclusion (LFI) via Improper URL Handling in `Real-Browser` monitor

Summary An Improper URL Handling Vulnerability allows an attacker to access sensitive local files on the server by exploiting the file:/// protocol. This vulnerability is triggered via the "real-browser" request type, which takes a screenshot of the URL provided by the attacker. By supplying loca...