CVE-2021-26601

Packagist/impresscms/impresscms CVE-2021-26601: high 8.1

Path Traversal in ImpressCMS

Action: Upgrade impresscms/impresscms to 1.4.3 or later.

composer require impresscms/impresscms:1.4.3

Affected

Fixed versions

Sources

• osv: GHSA-4q96-9f63-p7jj
• https://nvd.nist.gov/vuln/detail/CVE-2021-26601
• https://github.com/ImpressCMS/impresscms/issues/914
• https://github.com/ImpressCMS/impresscms/pull/915
• https://hackerone.com/reports/1081878
• https://github.com/ImpressCMS/impresscms
• https://github.com/ImpressCMS/impresscms/releases/tag/v1.4.3
• http://karmainsecurity.com/KIS-2022-02
• http://packetstormsecurity.com/files/166402/ImpressCMS-1.4.2-Path-Traversal.html
• http://seclists.org/fulldisclosure/2022/Mar/44

CVE-2021-26601 · published 2022-03-29T00:01:16Z · modified 2023-11-08T04:05:21.726953Z · JSON