Description
An issue was discovered in AfterLogic Aurora through 7.7.9 and WebMail Pro through 7.7.9. They allow directory traversal to read files (such as a data/settings/settings.xml file containing admin panel credentials), as demonstrated by dav/server.php/files/personal/%2e%2e when using the caldav_public_user account (with caldav_public_user as its password).
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- AfterLogic Aurora and WebMail Pro < 7.7.9 - Information Disclosure http/cves/2021/CVE-2021-26294.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.