Description
Craft CMS before 2.6.2976 does not properly restrict viewing the contents of files in the craft/app/ folder.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | craftcms/cms | < 2.6.2976 | 2.6.2976 | GHSA-7qq6-fgpw-xw45 |
Medium · 5.3
CVE-2017-8383
EUVD-2022-3052GHSA-7qq6-fgpw-xw45
Craft CMS Unauthorized View
Published May 1, 2017 · Updated Aug 5, 2024 · Assigned by mitre