CVE-2021-43836

Sulu is an open-source PHP content management system based on the Symfony framework. In affected versions an attacker can read arbitrary local files via a PHP file include. In a default configuration this also leads to remote code execution. The problem is patched with the Versions 1.6.44, 2.2.18...

CVE-2021-43836 PHP file inclusion in the Sulu admin panel

Sulu is an open-source PHP content management system based on the Symfony framework. In affected versions an attacker can read arbitrary local files via a PHP file include. In a default configuration this also leads to remote code execution. The problem is patched with the Versions 1.6.44, 2.2.18...

CVE-2021-43836

CVE-2021-43836 affects Sulu, an open-source PHP CMS based on Symfony. Affected versions expose an arbitrary local file read via a PHP file include, which in default configurations can also enable remote code execution. Root cause: vulnerability in the SymfonyExpressionTokenProvider handling in th...