CVE-2021-33359 | BDVDB-2026-155152 Detail

Description#

A vulnerability exists in gowitness < 2.3.6 that allows an unauthenticated attacker to perform an arbitrary file read using the file:// scheme in the url parameter to get an image of any file.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://twitter.com/leonjza/status/1395283512433971202?s=19
https://github.com/sensepost/gowitness/releases/tag/2.3.6

Exploit#

No public exploit known

History#

Version 12021-06-09Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.