Attention everybody!

Your side absolutely open for any people for access to your server file system!

If you have installed CodeManager, simple type in browser http://yoursite.tld//vendors/codemanager/index.php and you will see all your files.

So, anybody can do it also.

Hello Edward,

The URL will work only if you are logged in as administrator in your webstore.

You can test the URL in incognito mode and see that it won't be working if you are not logged in.

Hello Еунфб

In same browser, even logout I have access to file manager. Other browser, yes, just black screen. Maybe cookie allow use file manager even not logged as admin.

Hello Edward,

Thank you for the provided information.

We will take this into account for the next version, however, the issue that you are reporting right now could happen only on the currently opened browser and the session is preserved. If only you are using the PC and the same browser, there is no reason for any concerns about security flaws.