Security Advisory

CVE-2021-37777

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-10-04 13:40:18

Last updated 2024-08-04 01:30:08

Assigner mitre

State PUBLISHED

Description

Gila CMS 2.2.0 is vulnerable to Insecure Direct Object Reference (IDOR). Thumbnails uploaded by one site owner are visible by another site owner just by knowing the other site name and fuzzing for picture names. This leads to sensitive information disclosure.

← Browse all CVEs View on cve.org ↗