CVE-2021-32752: Files or Directories Accessible to External Parties in ether/logs

high Affects ether/logs. Feed 2026.10.29.4, updated 2026-10-29; published 2021-07-12; advisory modified 2026-07-08.

Files or Directories Accessible to External Parties in ether/logs

Package: ether/logs Composer
Affected versions: <3.0.4
Fixed in: 3.0.4
Severity: high CVSS 7.2
Exploitation: not on CISA KEV · EPSS 1% (65.0th percentile)
Published: 2021-07-12
Source: osv.dev

References

Am I affected?

Find out in one command. phpwarden checks your composer.lock against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.

# PHP projects (recommended)
composer require --dev phpwarden/phpwarden
# then
vendor/bin/phpwarden deps composer.lock

# or, without Composer
pipx install phpwarden   &&   phpwarden deps composer.lock

Or keep it checked automatically: GitHub Action · pre-commit hook · GitLab CI · Laravel artisan command

Install docs How findings are ranked

Related advisories

CVE-2021-39316 high The Zoomsounds plugin <= 6.45 for WordPress allows arbitrary files, including sensitive co same weakness: CWE-552
CVE-2023-6114 high The Duplicator WordPress plugin before 1.5.7.1, Duplicator Pro WordPress plugin before 4.5 same weakness: CWE-552
CVE-2023-33568 high Dolibarr vulnerable to unauthenticated database access same weakness: CWE-552
CVE-2021-43008 high Files or Directories Accessible to External Parties in Adminer same weakness: CWE-552
CVE-2022-41343 high Dompdf allows remote file inclusion because URI validation failure does not halt font regi same weakness: CWE-552
CVE-2022-33901 medium Unauthenticated Arbitrary File Read vulnerability in MultiSafepay plugin for WooCommerce p same weakness: CWE-552