CVE-2018-16977

PoC —

CVSS 3.0

5.3 medium

EPSS

1%p67

Published

Sep 12, 2018 (Sep 12, 2018)

Modified

Jun 17, 2026

Description

Monstra CMS V3.0.4 has an information leakage risk (e.g., PATH, DOCUMENT_ROOT, and SERVER_ADMIN) in libraries/Gelato/ErrorHandler/Resources/Views/Errors/exception.php.

Vendors: monstra
Products: monstra
Weakness: CWE-200
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news0 stories

No ingested article mentions this CVE yet.