Unknown · Phpfastcache · CVE-2021-37704
**Name of the Vulnerable Software and Affected Versions**
PhpFastCache versions prior to 6.1.5
PhpFastCache versions prior to 7.1.2
PhpFastCache versions prior to 8.0.7
**Description**
The issue concerns the exposure of `phpinfo()` when the `/vendor` directory is not protected from public access. This situation is rare today, as the vendor directory is often located outside the web directory or protected via server rules.
**Recommendations**
For versions prior to 6.1.5, update to version 6.1.5 or later.
For versions prior to 7.1.2, update to version 7.1.2 or later.
For versions prior to 8.0.7, update to version 8.0.7 or later.
As a temporary workaround, protect the `/vendor` directory from public access.