Vulnerability in N/a

CVE-2021-28377

ChronoForums 2.0.11 allows av Directory Traversal to read arbitrary files.

EPSS: 0.526 (98.0th percentile) — read the EPSS interpretation.

Affected products

N/a — versions n/a

Public proof-of-concept exploits

References

herolab.usd.de/en/security-advisories/usd-2021-0007/ (x_refsource_MISC)

Frequently asked questions

What is CVE-2021-28377?: CVE-2021-28377 is a vulnerability in N/a. Published 2022-01-12.
Is CVE-2021-28377 known to be exploited?: 3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.