CVE-2021-32752

MediumCVSS 4.9/10Last modified Jun 17, 2026

Description

Ether Logs is a package that allows one to check one's logs in the Craft 3 utilities section. A vulnerability was found in versions prior to 3.0.4 that allowed authenticated admin users to access any file on the server. The vulnerability has been fixed in version 3.0.4. As a workaround, one may disable the plugin if untrustworthy sources have admin access.

Metrics

CVSS 3.1 4.9/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-552

Affected software

No affected versions have been published.

Timeline

Published: Jul 9, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-327536.5EdgeX Foundry is an open source project for building a common open framework for internet-of-things edge computing. A vulnerability exists i CVE-2021-327545.3FlowDroid is a data flow analysis tool. FlowDroid versions prior to 2.9.0 contained an XML external entity (XXE) vulnerability that allowed CVE-2021-327554.3Wire is a collaboration platform. wire-ios-transport handles authentication of requests, network failures, and retries for the iOS implement CVE-2021-327568.8ManageIQ is an open-source management platform. In versions prior to jansa-4, kasparov-2, and lasker-1, there is a flaw in the MiqExpression CVE-2021-327587.2OpenMage Magento LTS is an alternative to the Magento CE official releases. Prior to versions 19.4.15 and 20.0.11, layout XML enabled admin CVE-2021-327597.2OpenMage magento-lts is an alternative to the Magento CE official releases. Due to missing sanitation in data flow in versions prior to 19.4 CVE-2021-327606.3containerd is a container runtime. A bug was found in containerd versions prior to 1.4.8 and 1.5.4 where pulling and extracting a specially-CVE-2021-327617.5Redis is an in-memory database that persists on disk. A vulnerability involving out-of-bounds read and integer overflow to buffer overflow e CVE-2021-327628.8Redis is an open source, in-memory database that persists on disk. The redis-cli command line tool and redis-sentinel service may be vulnera CVE-2021-327636.5OpenProject is open-source, web-based project management software. In versions prior to 11.3.3, the `MessagesController` class of OpenProjec CVE-2021-327645.4Discourse is an open-source discussion platform. In Discourse versions 2.7.5 and prior, parsing and rendering of YouTube Oneboxes can be sus CVE-2021-327658.8Hiredis is a minimalistic C client library for the Redis database. In affected versions Hiredis is vulnurable to integer overflow if provide