CVE-2017-8383

2017-05-0106:59:00

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.4%

JSON

Craft CMS before 2.6.2976 does not properly restrict viewing the contents of files in the craft/app/ folder.

CPENameOperatorVersion
cmseq1.0.2270
cmseq2.4.2698
cmseq2.6.2789
cmseq2.6.2903
cmseq1.3.2461
cmseq1.2.0-alpha.2322
cmseq0.9.0-alpha.2231
cmseq0.9.2094
cmseq2.4.2692
cmseq2.3.2643

Name	Operator	Version
cms	eq	1.0.2270
cms	eq	2.4.2698
cms	eq	2.6.2789
cms	eq	2.6.2903
cms	eq	1.3.2461
cms	eq	1.2.0-alpha.2322
cms	eq	0.9.0-alpha.2231
cms	eq	0.9.2094
cms	eq	2.4.2692
cms	eq	2.3.2643

Rows per page:

1-10 of 3811

References

craftcms.com/changelog#2-6-2976

twitter.com/CraftCMS/status/857743080224473088