← All advisories

High severityNVD Advisory· Published Mar 28, 2022· Updated Aug 3, 2024

CVE-2021-26601

CVE-2021-26601

Description

ImpressCMS before 1.4.3 allows libraries/image-editor/image-edit.php image_temp Directory Traversal.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
impresscms/impresscmsPackagist	< 1.4.3	1.4.3

Affected products

2

Impresscms/Impresscmscpe-rescue
ghsa-coords
pkg:composer/impresscms/impresscms
Range: < 1.4.3

Patches

Vulnerability mechanics

References

9

github.com/advisories/GHSA-4q96-9f63-p7jjghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2021-26601ghsaADVISORY
karmainsecurity.com/KIS-2022-02ghsax_refsource_MISCWEB
packetstormsecurity.com/files/166402/ImpressCMS-1.4.2-Path-Traversal.htmlghsax_refsource_MISCWEB
seclists.org/fulldisclosure/2022/Mar/44ghsax_refsource_MISCWEB
github.com/ImpressCMS/impresscms/issues/914ghsaWEB
github.com/ImpressCMS/impresscms/pull/915ghsaWEB
github.com/ImpressCMS/impresscms/releases/tag/v1.4.3ghsaWEB
hackerone.com/reports/1081878ghsax_refsource_MISCWEB

News mentions

0

No linked articles in our index yet.