Description
Ivanti Avalanche存在目录遍历漏洞，此漏洞是缺乏校验导致的。
Ivanti Avalanche CVE-2021-30497目录遍历漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2021-30497
https://ssd-disclosure.com/ssd-advisory-ivanti-avalanche-directory-traversal/
https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-30497.yaml
https://pentest-tools.com/vulnerabilities-exploits/ivanti-avalanche-632-local-file-inclusion_2879
https://s4e.io/tools/ivanti-avalanche-directory-traversal-cve-2021-30497
https://www.wavelink.com/Download-Avalanche_Mobile-Device-Management-Software/
https://forums.ivanti.com/s/article/Security-Alert-CVE-2021-30497-Directory-Traversal-Vulnerability
https://app.opencve.io/cve/?vendor=ivanti&page=19
https://feedly.com/cve/CVE-2021-30497
https://vulners.com/search/tags/Ivanti%20Avalanche?skip=100