CVE-2021-33359

Name of the Vulnerable Software and Affected Versions gowitness versions prior to 2.3.6

Description A vulnerability exists that allows an unauthenticated attacker to perform an arbitrary file read using the file:// scheme in the url parameter to get an image of any file.

Recommendations For versions prior to 2.3.6, update to version 2.3.6 or later to resolve the issue. As a temporary workaround, consider restricting access to the url parameter to minimize the risk of exploitation. Avoid using the url parameter with the file:// scheme until the issue is resolved.