Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/03/16 6:44 p.m.15 views

Azure Blob Storage for Craft CMS Potential Sensitive Information Disclosure vulnerability

Unauthenticated users can view a list of buckets the plugin has access to. The DefaultController-actionLoadContainerData endpoint allows unauthenticated users with a valid CSRF token to view a list of buckets that the plugin is allowed to see. Because Azure can return sensitive data in error...

8.7CVSS5.8AI score0.00348EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder