CVE-2021-33359

A vulnerability exists in gowitness < 2.3.6 that allows an unauthenticated attacker to perform an arbitrary file read using the file:// scheme in the url…

published June 9, 2021

CVSS
—
EPSS
1%
Percentile
69.2
In the wild
Unconfirmed
What it is

A vulnerability exists in gowitness < 2.3.6 that allows an unauthenticated attacker to perform an arbitrary file read using the file:// scheme in the url parameter to get an image of any file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01252 · 69.2th percentile
Published
2021-06-09T17:45Z
EPSS history
Timeline
  • 09 JUN 17:45Z
    A vulnerability exists in gowitness < 2.3.6 that allows an unauthenticated attacker to perform an arbitrary file read using the file:// scheme in the url…
    cvelistv5