Skip to content
OpenAdvisories

Product · craftcms

aws-s3

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.9
    CVE-2026-32265

    Amazon S3 for Craft CMS has an Information Disclosure vulnerability

    The Amazon S3 for Craft CMS plugin provides an Amazon S3 integration for Craft CMS. In versions 2.0.2 through 2.2.4, unauthenticated users can view a list of buckets the plugin has access to. The `BucketsController->actionLoadBucketData()` endpoint allows una…

    craftcms aws-s3 craftcms/aws-s3 Packagist