CVE-2021-42644: Cmseasy

Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days.

cmseasy V7.7.5_20211012 is affected by an arbitrary file read vulnerability. After login, the configuration file information of the website such as the database configuration file (config / config_database) can be read through this vulnerability.

Affected products

• Cmseasy Cmseasy: version 7.7.5_20211012 only

Published 2022-05-17. Last modified 2026-06-17.