CVE-2021-33359: Sensepost Gowitness

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

A vulnerability exists in gowitness < 2.3.6 that allows an unauthenticated attacker to perform an arbitrary file read using the file:// scheme in the url parameter to get an image of any file.

Affected products

• Sensepost Gowitness: before 2.3.6 (fixed in 2.3.6)

Published 2021-06-09. Last modified 2026-06-17.