CVE-2017-8383 - Craft CMS before 2.6.2976 does not properly restrict viewing the contents of files in the craft/app/ folder

MEDIUM

Craft CMS before 2.6.2976 does not properly restrict viewing the contents of files in the craft/app/ folder

Published May 1, 2017

5.3

MEDIUM

CVSS 3.0

EPSS 1.15%

Craft CMS before 2.6.2976 does not properly restrict viewing the contents of files in the craft/app/ folder.

No remediation recorded yet.

Weaknesses (1)

CWE-284

Link	Providers	Tags
https://craftcms.com/changelog#2-6-2976		x_refsource_CONFIRMRelease NotesVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-3052		Advisory
https://github.com/advisories/GHSA-7qq6-fgpw-xw45		Advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-8383
https://twitter.com/CraftCMS/status/857743080224473088		x_refsource_CONFIRMVendor Advisory