Craft CMS Logs Plugin 3.0.3 - Path Traversal (Authenticated) Vulnerability

Exploit Title: Craft CMS Logs Plugin 3.0.3 - Path Traversal Authenticated Exploit Author: Steffen Rogge Vendor Homepage: https://github.com/ethercreative/logs Software Link: https://plugins.craftcms.com/logs Version: =3.0.4 impact: Medium found: 2021-07-06 SEC Consult Vulnerability Lab An...

PT-2022-15980

Name of the Vulnerable Software and Affected Versions Craft CMS Logs plugin versions prior to 3.0.4 Description The issue allows remote attackers to read arbitrary files via input to actionStream in Controller.php. This can be exploited by providing malicious input to the actionStream endpoint,...