Vulnerability in N/a

CVE-2021-3293

emlog v5.3.1 has full path disclosure vulnerability in t/index.php, which allows an attacker to see the path to the webroot/file.

EPSS: 0.621 (98.4th percentile) — read the EPSS interpretation.

Affected products

N/a — versions n/a

Public proof-of-concept exploits

References

github.com/emlog/emlog/issues/62 (x_refsource_MISC)
github.com/thinkgad/Bugs/blob/main/emlog v5.3.1 has Full Path Disclosure vulner… (x_refsource_MISC)

Frequently asked questions

What is CVE-2021-3293?: CVE-2021-3293 is a vulnerability in N/a. Published 2021-02-08.
Is CVE-2021-3293 known to be exploited?: 7 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.