CVE-2021-26294

An issue was discovered in AfterLogic Aurora through 7.7.9 and WebMail Pro through 7.7.9. They allow directory traversal to read files (such as a data/settings/settings.xml file containing admin panel credentials), as demonstrated by dav/server.php/files/personal/%2e%2e when using the caldav_public_user account (with caldav_public_user as its password).

CVSS v3.1

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

16.90% chance of exploitation in the next 30 days, 97th percentile

Nuclei

high · CWE-22

Published

2021-03-07

Updated

2024-08-03

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-26294.yaml

Exploit collections (1)

• tzwlhack/Vulnerability/blob/main/WebMail%20Pro%207.7.9%20%E7%9B%AE%E5%BD%95%E9%81%8D%E5%8…

References

• CVE Record
• NVD entry

Related

• CVE-2021-26293
• CVE-2021-26295
• CVE-2021-26291
• CVE-2021-26296
• CVE-2021-26274
• CVE-2021-26303