ether/logs vulnerabilities

Latest ether/logs CVEs

Newest publication first

1. CVE-2022-23409 Duplicate Advisory: Path Traversal in the Logs plugin for Craft CMS

   Published 2022-01-31

   Medium·CVSS 4.9 EPSS 13.8%

   The Logs plugin before 3.0.4 for Craft CMS allows remote attackers to read arbitrary files via input to actionStream in Controller.php.

2. CVE-2021-32752 Files or Directories Accessible to External Parties in ether/logs

   Published 2021-07-09

   Medium·CVSS 4.9 EPSS 1.1%

   Ether Logs is a package that allows one to check one's logs in the Craft 3 utilities section. A vulnerability was found in versions prior to 3.0.4 that allowed authenticated admin users to access any file on the server. The vulnerability has been fixed in version 3.0.4. As a work...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.