CVE-2022-23409

The Logs plugin before 3.0.4 for Craft CMS allows remote attackers to read arbitrary files via input to actionStream in Controller.php

published January 31, 2022

CVSS
—
EPSS
14%
Percentile
96.5
In the wild
Unconfirmed
What it is

The Logs plugin before 3.0.4 for Craft CMS allows remote attackers to read arbitrary files via input to actionStream in Controller.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.13759 · 96.5th percentile
Published
2022-01-31T07:04Z
EPSS history
Timeline
  • 31 JAN 07:04Z
    The Logs plugin before 3.0.4 for Craft CMS allows remote attackers to read arbitrary files via input to actionStream in Controller.php
    cvelistv5