Lucene search

K
prionPRIOn knowledge basePRION:CVE-2021-37777
HistoryOct 04, 2021 - 2:15 p.m.

Information disclosure

2021-10-0414:15:00
PRIOn knowledge base
www.prio-n.com
3

7.2 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.6%

Gila CMS 2.2.0 is vulnerable to Insecure Direct Object Reference (IDOR). Thumbnails uploaded by one site owner are visible by another site owner just by knowing the other site name and fuzzing for picture names. This leads to sensitive information disclosure.

CPENameOperatorVersion
gila_cmseq2.2.0

7.2 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.6%

Related for PRION:CVE-2021-37777