Lucene search
CVE-2023-40035
Craft CMS allows potential remote code execution via bypassing validatePath function. Patched in versions 4.4.15 & 3.8.1
Show more
| Reporter | Title | Published | Views | Family All 15 |
|---|---|---|---|---|
 | CVE-2023-40035 Craft CMS vulnerable to Remote Code Execution via validatePath bypass | 23 Aug 202320:05 | – | cvelist |
| CVE-2024-52293 Craft has a Potential Remote Code Execution via missing path normalization & Twig SSTI | 13 Nov 202416:04 | – | cvelist |
 | CVE-2023-40035 Craft CMS vulnerable to Remote Code Execution via validatePath bypass | 23 Aug 202320:05 | – | vulnrichment |
| CVE-2024-52293 Craft has a Potential Remote Code Execution via missing path normalization & Twig SSTI | 13 Nov 202416:04 | – | vulnrichment |
 | Craft CMS vulnerable to Remote Code Execution via validatePath bypass | 21 Aug 202319:58 | – | osv |
| CVE-2023-40035 | 23 Aug 202321:15 | – | osv |
| Craft CMS vulnerable to Potential Remote Code Execution via missing path normalization & Twig SSTI | 13 Nov 202414:16 | – | osv |
| CVE-2024-52293 | 13 Nov 202416:15 | – | osv |
 | CVE-2023-40035 | 23 Aug 202321:15 | – | nvd |
| CVE-2024-52293 | 13 Nov 202416:15 | – | nvd |
10
[
{
"vendor": "craftcms",
"product": "cms",
"versions": [
{
"version": ">= 4.0.0-RC1, < 4.4.15",
"status": "affected"
},
{
"version": ">= 3.0.0, < 3.8.15",
"status": "affected"
}
]
}
]Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo23 Aug 2023 21:15Current
7.4High risk
Vulners AI Score7.4
CVSS37.2
EPSS0.004