CVE-2026-64967

Name of the Vulnerable Software and Affected Versions ATutor version 2.2.4

Description A path traversal vulnerability exists in the error log viewer. This flaw allows an attacker with administrative privileges to access arbitrary files outside the intended logs directory, potentially leading to unauthorized access to sensitive files and other resources accessible to the web server process. Path traversal is a technique used to access files and directories that are stored outside the web root folder by manipulating variables that reference files with dot-dot-slash (../) sequences.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.