CVE-2018-16977

Name of the Vulnerable Software and Affected Versions Monstra CMS version 3.0.4

Description The issue concerns an information leakage risk, where sensitive data such as PATH, DOCUMENT ROOT, and SERVER ADMIN may be exposed. This is related to the file libraries/Gelato/ErrorHandler/Resources/Views/Errors/exception.php.

Recommendations For Monstra CMS version 3.0.4, update the libraries/Gelato/ErrorHandler/Resources/Views/Errors/exception.php file to prevent information leakage. At the moment, there is no information about a newer version that contains a fix for this vulnerability.