← All advisories

Medium severity5.3NVD Advisory· Published May 1, 2017· Updated Jun 17, 2026

CVE-2017-8383

CVE-2017-8383

Description

Craft CMS before 2.6.2976 does not properly restrict viewing the contents of files in the craft/app/ folder.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
craftcms/cmsPackagist	< 2.6.2976	2.6.2976

Affected products

2

Craftcms/Craft CMS
cpe:2.3:a:craftcms:craft_cms:*:*:*:*:*:*:*:*
Range: <=2.6.2974
ghsa-coords
pkg:composer/craftcms/cms
Range: < 2.6.2976

Patches

Vulnerability mechanics

References

4

craftcms.com/changelognvdRelease NotesVendor AdvisoryWEB
github.com/advisories/GHSA-7qq6-fgpw-xw45ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2017-8383ghsaADVISORY
twitter.com/CraftCMS/status/857743080224473088nvdVendor AdvisoryWEB

News mentions

0

No linked articles in our index yet.