Description
An issue was discovered in Pascom Cloud Phone System before 7.20.x. A configuration error between NGINX and a backend Tomcat server leads to a path traversal in the Tomcat server, exposing unintended endpoints.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Pascom CPS Server-Side Request Forgery http/cves/2021/CVE-2021-45967.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.