Webp server go - Local File Inclusion

By kannthu

High

Vidoc Module

#lfi#webp

Description

Author: pikpikcu Classification CWE-ID: CWE-22 CVSS-Metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS-Score: 7.5 Webp server go is vulnerable to local file inclusion. Reference - https://github.com/webp-sh/webp_server_go/issues/92 Metadata max-request: 1 verified: true shodan-query: http.html:"Webp"

Module preview

Concurrent Requests (1)

1. HTTP Request template

GET/%252e%252e%252f%252...

Matching conditions

regex: root:.*:0:0and

status: 200

Passive global matcher

No matching conditions.

On match action

Report vulnerability