CVE-2022-23409

Publication date

2022-01-31 07:04:50

Family

mitre

State

PUBLISHED

Description

The Logs plugin before 3.0.4 for Craft CMS allows remote attackers to read arbitrary files via input to actionStream in Controller.php.