PT-2021-19905
CVE-2021-32752
·
Published
2021-07-09
·
Updated
2021-07-22
Description by
CVSS 3.1
7.2
HighMetricsAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Ether Logs versions prior to 3.0.4
Description
A vulnerability was found in Ether Logs that allowed authenticated admin users to access any file on the server. The issue has been fixed in version 3.0.4. As a workaround, one may disable the plugin if untrustworthy sources have admin access.
Recommendations
For versions prior to 3.0.4, update to version 3.0.4 to resolve the issue.
As a temporary workaround, consider disabling the plugin if untrustworthy sources have admin access.
Found an issue in the description? Have something to add? Feel free to write us 👾