Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Logfile Data Exposure Vulnerability Still Present in 6.9.0 #920

Open
Alongar opened this issue Mar 28, 2024 · 0 comments
Open

Logfile Data Exposure Vulnerability Still Present in 6.9.0 #920

Alongar opened this issue Mar 28, 2024 · 0 comments

Comments

@Alongar
Copy link

Alongar commented Mar 28, 2024

Hello,

Security vulnerability that was reported by Patchstack from <=6.8.9 is still present in 6.9.0. Patchstack confirmed it and said, "“We still don’t see that the log filename has been secured by adding a sufficient length of random string as the prefix or suffix on version 6.9.0. Additionally, we also recommend to apply .htaccess rule to prevent direct access.”

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant