Description
SABnzbd 服务存在 Web 界面未授权访问漏洞。其配置页面无需登录即可访问，会将 API 密钥、配置文件路径、服务器参数及系统信息泄露给未授权用户。
SABnzbd存在未授权信息泄露漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://pentest-tools.com/vulnerabilities-exploits/sabnzbd-unauthenticated-web-interface-access_29139
https://sabnzbd.org/wiki/extra/access-denied.html
https://github.com/sabnzbd/sabnzbd/security/advisories/GHSA-9x87-96gg-33w2
https://www.reddit.com/r/usenet/comments/mr9qom/beware_of_malware_targeting_unprotected/
https://nvd.nist.gov/vuln/detail/CVE-2021-29488
https://cve.imfht.com/detail/CVE-2020-13124