CVE-2021-32752

Published: Jul 9, 2021Modified: Jun 17, 2026

4.9

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.2 / Impact: 3.6

Source: NVD

Description

Ether Logs is a package that allows one to check one's logs in the Craft 3 utilities section. A vulnerability was found in versions prior to 3.0.4 that allowed authenticated admin users to access any file on the server. The vulnerability has been fixed in version 3.0.4. As a workaround, one may disable the plugin if untrustworthy sources have admin access.

Affected (1)

Products: Ethercreative: Logs

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ethercreative Logs	Before 3.0.4

Related CWEs

Files or Directories Accessible to External Parties

The product makes files or directories accessible to unauthorized actors, even though they should not be.

References (4)

https://github.com/ethercreative/logs/releases/tag/3.0.4

Source: security-advisories@github.com

Release NotesThird Party Advisory

https://github.com/ethercreative/logs/security/advisories/GHSA-fp63-499m-hq6m

Source: security-advisories@github.com

Third Party Advisory

https://github.com/ethercreative/logs/releases/tag/3.0.4

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesThird Party Advisory

https://github.com/ethercreative/logs/security/advisories/GHSA-fp63-499m-hq6m

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.