Description
An issue was discovered in FAUST iServer before 9.0.019.019.7. For each URL request, it accesses the corresponding .fau file on the operating system without preventing %2e%2e%5c directory traversal.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- FAUST iServer 9.0.018.018.4 - Local File Inclusion http/cves/2021/CVE-2021-34805.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.