CVE-2021-3293: Medium severity Emlog emlog vulnerability

Published Feb 8, 2021

Updated

emlog v5.3.1 has full path disclosure vulnerability in t/index.php, which allows an attacker to see the path to the webroot/file.

Affected Software

1 affected component

Emlog emlog=5.3.1

Event History

Feb 8, 2021

CVE Published

via MITRE·02:17 PM

Data Sourced

via MITRE·02:17 PM

Description

Data Sourced

via NVD·03:15 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2021-3293?

The severity of CVE-2021-3293 is medium with a severity value of 5.3.

What is the description of CVE-2021-3293?

CVE-2021-3293 is a full path disclosure vulnerability in emlog v5.3.1, which allows attackers to see the path to the webroot/file.

Which software versions are affected by CVE-2021-3293?

emlog v5.3.1 is affected by CVE-2021-3293.

How can an attacker exploit the vulnerability in CVE-2021-3293?

The vulnerability in CVE-2021-3293 allows an attacker to view the path to the webroot/file.

Are there any references available for CVE-2021-3293?

Yes, you can find references for CVE-2021-3293 at the following links: [https://github.com/emlog/emlog/issues/62](https://github.com/emlog/emlog/issues/62) and [https://github.com/thinkgad/Bugs/blob/main/emlog%20v5.3.1%20has%20Full%20Path%20Disclosure%20vulnerability.md](https://github.com/thinkgad/Bugs/blob/main/emlog%20v5.3.1%20has%20Full%20Path%20Disclosure%20vulnerability.md).