{"uuid": "f7f48756-3125-437d-9269-3a76fa81876c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-36939", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/cassandra_web_file_read.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Jeremy Brown\", \"krastanoel\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an unauthenticated directory traversal vulnerability in Cassandra Web\\n          'Cassandra Web' version 0.5.0 and earlier, allowing arbitrary file read with the web server privileges.\\n          This vulnerability occurred due to the disabled Rack::Protection module\", \"disclosure_date\": null, \"fullname\": \"auxiliary/scanner/http/cassandra_web_file_read\", \"is_install_path\": true, \"mod_time\": \"2026-05-27 08:49:48 +0000\", \"name\": \"Cassandra Web File Read Vulnerability\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/scanner/http/cassandra_web_file_read.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"scanner/http/cassandra_web_file_read\", \"references\": [\"CVE-2020-36939\", \"URL-https://github.com/avalanche123/cassandra-web/commit/f11e47a26f316827f631d7bcfec14b9dd94f44be\", \"EDB-49362\"], \"rport\": 3000, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:28.749308Z"}