AnchorCMS Error Log Exposure

By Anandhu K A Anandhu K A
Published on 10 Jan 2022
Vulnerability

Description

In Anchor 0.12.3, a bug was discovered in config/error.php. If a MySQL error (such as “Too many connections”) occurs, the error log is accessible via an errors.log URI and contains MySQL credentials.

Recommendations

  • Update AnchorCMS to the latest version
Anandhu K A
Written by
Anandhu K A
Lead Engineer

With a profound understanding of product development, Anandhu plays a pivotal role in crafting cutting-edge solutions that cater to the evolving security needs of digital applications. His expertise, deeply rooted in both engineering and security, makes him an essential component of Beagle Security's mission

Experience the Beagle Security platform
Unlock one full penetration test and all Advanced plan features free for 14 days
4.8 on G2 • ISO 27001 certified
See How Beagle Security Works
No credit card • No setup required
Launch interactive demo