Описание
Ether Logs is a package that allows one to check one's logs in the Craft 3 utilities section. A vulnerability was found in versions prior to 3.0.4 that allowed authenticated admin users to access any file on the server. The vulnerability has been fixed in version 3.0.4. As a workaround, one may disable the plugin if untrustworthy sources have admin access.
Ссылки
- Release NotesThird Party Advisory
- Third Party Advisory
- Release NotesThird Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 3.0.4 (исключая)
cpe:2.3:a:ethercreative:logs:*:*:*:*:*:*:*:*
EPSS
Процентиль: 73%
0.00773
Низкий
7.2 High
CVSS3
4.9 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-552
CWE-552
Связанные уязвимости
CVSS3: 7.2
github
больше 4 лет назад
Files or Directories Accessible to External Parties in ether/logs
EPSS
Процентиль: 73%
0.00773
Низкий
7.2 High
CVSS3
4.9 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-552
CWE-552