Security Advisory

CVE-2022-23409

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-01-31 07:04:50
Last updated 2024-08-03 03:43:45
Assigner mitre
State PUBLISHED

Description

The Logs plugin before 3.0.4 for Craft CMS allows remote attackers to read arbitrary files via input to actionStream in Controller.php.