TI-2018-12513 CVE-2018-17567 · GHSA-4xjh-m3qx-49wcJekyll through 3.6.2, 3.7.x through 3.7.3, and 3.8.x through 3.8.3 allows attackers to…Priority LOW 37Jekyll through 3.6.2, 3.7.x through 3.7.3, and 3.8.x through 3.8.3 allows attackers to access arbitrary files by specifying a symlink in the "include" key in the "_config.yml" file.CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.02188 · Published 2018-09-28 · Fixed in 3.6.3, 3.7.4 +1 CWE-59
