How severe is CVE-2021-32752?

This vulnerability has a severity rating of MEDIUM with a CVSS score of 4.9 out of 10.

What type of vulnerability is CVE-2021-32752?

This is classified as CWE-552, which is a common weakness in software security.

CVE-2021-32752 - MEDIUM Severity | CVSS 4.9

Vulnerability Description

Ether Logs is a package that allows one to check one's logs in the Craft 3 utilities section. A vulnerability was found in versions prior to 3.0.4 that allowed authenticated admin users to access any file on the server. The vulnerability has been fixed in version 3.0.4. As a workaround, one may disable the plugin if untrustworthy sources have admin access.

Related Vulnerabilities

CVE-2015-4715

MEDIUM

CVSS:4.9(Medium)

The fetch function in OAuth/Curl.php in Dropbox-PHP, as used in ownCloud Server before 6.0.8, 7.x before 7.0.6, and 8.x before 8.0.4 when an external Dropbox storage has been mounted, allows remote ad...

CWE-5522015

CVE-2021-24154

MEDIUM

CVSS:4.9(Medium)

The Theme Editor WordPress plugin before 2.6 did not validate the GET file parameter before passing it to the download_file() function, allowing administrators to download arbitrary files on the web s...

CWE-5522021

CVE-2021-25004

MEDIUM

CVSS:4.9(Medium)

The SEUR Oficial WordPress plugin before 1.7.2 creates a PHP file with a random name when installed, even though it is used for support purposes, it allows to download any file from the web server wit...

CWE-5522021

CVE-2021-44983

MEDIUM

CVSS:4.9(Medium)

In taocms 3.0.1 after logging in to the background, there is an Arbitrary file download vulnerability at the File Management column.

CWE-5522021

CVE-2022-2222

MEDIUM

CVSS:4.9(Medium)

The Download Monitor WordPress plugin before 4.5.91 does not ensure that files to be downloaded are inside the blog folders, and not sensitive, allowing high privilege users such as admin to download ...

CWE-5522022

CVE-2022-23316

MEDIUM

CVSS:4.9(Medium)

An issue was discovered in taoCMS v3.0.2. There is an arbitrary file read vulnerability that can read any files via admin.php?action=file&ctrl=download&path=../../1.txt.

CWE-5522022