Unscored Scanner template CVE-2021-29006 EUVD-2021-15652GHSA-67w5-wmf6-chgg

rConfig 3.9.6 is affected by a Local File Disclosure vulnerability. An authenticated user may successfully download any file on the server.

Published Oct 11, 2021 · Updated Jul 9, 2026 · Assigned by mitre

Description

Automated scanner template

A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.

rConfig 3.9.6 - Local File Inclusion http/cves/2021/CVE-2021-29006.yaml

Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.

References

https://github.com/mrojz/rconfig-exploit/blob/main/CVE-2021-29006-POC.py