flarum forum software package prior to 1.7.0 allows sensitive file read via path traversal in `LESS` parse
Reporter | Title | Published | Views | Family All 7 |
---|---|---|---|---|
![]() | Path Traversal Vulnerability in `LESS` Parser allows reading of sensitive server files | 13 Mar 202320:52 | – | github |
![]() | Path Traversal | 19 Mar 202305:43 | – | veracode |
![]() | CVE-2023-27577 | 10 Mar 202321:15 | – | nvd |
![]() | CVE-2023-27577 | 10 Mar 202321:15 | – | osv |
![]() | Path Traversal Vulnerability in `LESS` Parser allows reading of sensitive server files | 13 Mar 202320:52 | – | osv |
![]() | Path traversal | 10 Mar 202321:15 | – | prion |
![]() | CVE-2023-27577 Path Traversal Vulnerability in `LESS` Parser allows reading of sensitive server files in flarum | 10 Mar 202320:56 | – | cvelist |
[
{
"vendor": "flarum",
"product": "framework",
"versions": [
{
"version": "< 1.7.0",
"status": "affected"
}
]
}
]
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo