~ / search / GHSA-9chx-2vqw-8vq5

GHSA-9chx-2vqw-8vq5

Withdrawn on 2026-01-23. GitHub withdrew this advisory; it no longer applies.

Duplicate Advisory: Path Traversal in the Logs plugin for Craft CMS

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-23409

Packages

EcosystemPackageAffectedFixed in
Packagist ether/logs < 3.0.4 3.0.4

Details

As written in the advisory (Markdown source, shown as plain text).

## Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-fp63-499m-hq6m. This link is maintained to preserve external references. ## Original Description The Logs plugin before 3.0.4 for Craft CMS allows remote attackers to read arbitrary files via input to actionStream in Controller.php.

References

External links from the advisory. They lead to third-party sites.