1993 matches found
GHSA-9CHX-2VQW-8VQ5 Duplicate Advisory: Path Traversal in the Logs plugin for Craft CMS
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-fp63-499m-hq6m. This link is maintained to preserve external references. Original Description The Logs plugin before 3.0.4 for Craft CMS allows remote attackers to read arbitrary files via input to actionStream ...
CVE-2022-23409
The Logs plugin before 3.0.4 for Craft CMS allows remote attackers to read arbitrary files via input to actionStream in Controller.php...
CVE-2022-23409
The Logs plugin before 3.0.4 for Craft CMS allows remote attackers to read arbitrary files via input to actionStream in Controller.php...
Design/Logic Flaw
The Logs plugin before 3.0.4 for Craft CMS allows remote attackers to read arbitrary files via input to actionStream in Controller.php...
CVE-2022-23409
The Logs plugin before 3.0.4 for Craft CMS allows remote attackers to read arbitrary files via input to actionStream in Controller.php...
CVE-2022-23409
The Logs plugin before 3.0.4 for Craft CMS allows remote attackers to read arbitrary files via input to actionStream in Controller.php...
CVE-2022-23409
The Logs plugin before 3.0.4 for Craft CMS allows remote attackers to read arbitrary files via input to actionStream in Controller.php...
CVE-2022-23409
CVE-2022-23409 concerns the Craft CMS Logs plugin (Ethercreative Logs) prior to version 3.0.4. Root cause: path traversal through input to actionStream in Controller.php, enabling remote attackers to read arbitrary files. Affected: Logs plugin for Craft CMS, versions before 3.0.4. Impact: unautho...
PT-2022-15980
Name of the Vulnerable Software and Affected Versions Craft CMS Logs plugin versions prior to 3.0.4 Description The issue allows remote attackers to read arbitrary files via input to actionStream in Controller.php. This can be exploited by providing malicious input to the actionStream endpoint,...
CVE-2022-23409: Improper Limitation of a Pathname to a Restricted Directory
The Logs plugin before 3.0.4 for Craft CMS allows remote attackers to read arbitrary files via input to actionStream in Controller.php...
Ethercreative Logs 3.0.3 Path Traversal
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Authenticated Path Traversal product: Ethercreative Logs plugin for Craft CMS vulnerable version: =3.0.4 CVE number: CVE-2022-23409 impact: Medium homepage:...
Ethercreative Logs 3.0.3 Path Traversal Vulnerability
======================================================================= title: Authenticated Path Traversal product: Ethercreative Logs plugin for Craft CMS vulnerable version: =3.0.4 CVE number: CVE-2022-23409 impact: Medium homepage: https://github.com/ethercreative/logs found: 2021-07-06 by:...
Pixel＆tonic Craft CMS 路径遍历漏洞
Pixel & tonic Craft CMS is a content management system CMS from Pixel & Tonic Pixel & tonic. A path traversal vulnerability exists in Pixel & tonic Craft CMS, which stems from a path traversal security issue in the Ethercreative Logs plugin for Craft CMS...
CSV injection in Craft CMS
Withdrawn Duplicate of GHSA-h7vq-5qgw-jwwq...
GHSA-XRPJ-F9V6-2332 CSV injection in Craft CMS
Withdrawn Duplicate of GHSA-h7vq-5qgw-jwwq...
CVE-2021-41824
Craft CMS before 3.7.14 allows CSV injection...
CVE-2021-41824
Craft CMS before 3.7.14 allows CSV injection...
CVE-2021-41824
Craft CMS before 3.7.14 allows CSV injection...