Description
admin-cli before versions 3.0.0.alpha25, 2.2.1.cr2 is vulnerable to an EAP feature to download server log files that allows logs to be available via GET requests making them vulnerable to cross-origin attacks. An attacker could trigger the user's browser to request the log files consuming enough resources that normal server functioning could be impaired.
Remediation
References
Related Vulnerabilities
PrestaShop CVE-2024-34717 Vulnerability (CVE-2024-34717)
WordPress Plugin Ecwid Ecommerce Shopping Cart Cross-Site Request Forgery (6.10.23)
Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-6211)
Drupal Core 9.3.x Security Bypass (9.3.0 - 9.3.5)
WordPress Plugin Discount Rules for WooCommerce Multiple Vulnerabilities (2.0.2)