CVE-2021-36233

The function AdminGetFirstFileContentByFilePath in MIK.starlight 7.9.5.24363 allows (by design) an authenticated attacker to read arbitrary files from the…

published August 31, 2021

CVSS
—
EPSS
1%
Percentile
62.7
In the wild
Unconfirmed
What it is

The function AdminGetFirstFileContentByFilePath in MIK.starlight 7.9.5.24363 allows (by design) an authenticated attacker to read arbitrary files from the filesystem by specifying the file path.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01008 · 62.7th percentile
Published
2021-08-31T17:50Z
EPSS history
Timeline
  • 31 AUG 17:50Z
    The function AdminGetFirstFileContentByFilePath in MIK.starlight 7.9.5.24363 allows (by design) an authenticated attacker to read arbitrary files from the…
    cvelistv5