Craft CMS Unauthorized View

2022-05-1301:47:31

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.4%

JSON

Craft CMS before 2.6.2976 does not properly restrict viewing the contents of files in the craft/app/ folder.

CPENameOperatorVersion
craftcms/cmseq1.3.0-alpha.2380
craftcms/cmseq2.6.2771
craftcms/cmseq2.3.0-alpha.2602
craftcms/cmseq1.4.0-alpha.2509
craftcms/cmseq1.2.0-alpha.2318
craftcms/cmseq2.5.2765
craftcms/cmseq1.2.2392
craftcms/cmseq2.2.2579
craftcms/cmseq1.4.0-alpha.2469
craftcms/cmseq1.3.0-alpha.2402

Name	Operator	Version
craftcms/cms	eq	1.3.0-alpha.2380
craftcms/cms	eq	2.6.2771
craftcms/cms	eq	2.3.0-alpha.2602
craftcms/cms	eq	1.4.0-alpha.2509
craftcms/cms	eq	1.2.0-alpha.2318
craftcms/cms	eq	2.5.2765
craftcms/cms	eq	1.2.2392
craftcms/cms	eq	2.2.2579
craftcms/cms	eq	1.4.0-alpha.2469
craftcms/cms	eq	1.3.0-alpha.2402