Patch Ticker

GleezCMS media handler directory traversal exposes sensitive information

Sensitive files on a website management tool can leak out to outsiders.

Summary

A directory traversal flaw in the action_serve function of media.php in GleezCMS 1.2.0 lets a remote attacker obtain sensitive information.

What to do

We have not confirmed a fixed version yet. Check the source links below.

Products and platforms

  • Gleez GleezCMS

CVE IDs

Times

First published

First seen