CVE-2018-16977

2018-09-1223:29:00

Google

osv.dev

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.4%

JSON

Monstra CMS V3.0.4 has an information leakage risk (e.g., PATH, DOCUMENT_ROOT, and SERVER_ADMIN) in libraries/Gelato/ErrorHandler/Resources/Views/Errors/exception.php.

CPENameOperatorVersion
monstraeq2.2.0
monstraeq3.0.2
monstraeq2.3.1
monstraeq2.3.0
monstraeq3.0.4
monstraeq3.0.0
monstraeq3.0.3
monstraeq2.2.1
monstraeq3.0.1