A vulnerability exists in gowitness < 2.3.6 that allows... · CVE-2021-33359 · GitHub Advisory Database · GitHub

A vulnerability exists in gowitness < 2.3.6 that allows...

High severity Unreviewed Published May 24, 2022 to the GitHub Advisory Database • Updated Jan 29, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

A vulnerability exists in gowitness < 2.3.6 that allows an unauthenticated attacker to perform an arbitrary file read using the file:// scheme in the url parameter to get an image of any file.

References

Published by the National Vulnerability Database

Jun 9, 2021

Published to the GitHub Advisory Database May 24, 2022

Last updated Jan 29, 2023