CVE-2021-23263

Unauthenticated remote attackers can read textual content via FreeMarker including files /scripts/*, /templates/* and some of the files in /.git/* (non-binary).

Date published : 2021-12-02

https://docs.craftercms.org/en/3.1/security/advisory.html#cv-2021120106