CVE-2021-37777

creationtimestamp| type| source ---|---|--- 2021-10-04 18:18:43+00:00| seen| https://t.me/cibsecurity/29871...

CVE-2021-37777

The CVE-2021-37777 entry concerns Gila CMS 2.2.0, where an Insecure Direct Object Reference allows information disclosure. The issue arises via thumbnail access: thumbnails uploaded by one site owner can be accessed by another site owner by knowing the site name and fuzzing for image names. This ...