Vulnerabilities > CVE-2021-32752 - Files or Directories Accessible to External Parties vulnerability in Ethercreative Logs
Attack vector
NETWORK Attack complexity
LOW Privileges required
HIGH Confidentiality impact
HIGH Integrity impact
NONE Availability impact
NONE Summary
Ether Logs is a package that allows one to check one's logs in the Craft 3 utilities section. A vulnerability was found in versions prior to 3.0.4 that allowed authenticated admin users to access any file on the server. The vulnerability has been fixed in version 3.0.4. As a workaround, one may disable the plugin if untrustworthy sources have admin access.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 8 |