Lucene search

Craft CMS vulnerable to Remote Code Execution via validatePath bypass

🗓️ 21 Aug 2023 19:04:58Reported by GitHub Advisory DatabaseType

Craft CMS Remote Code Execution via validatePath bypas

Reporter	Title	Published	Views	Family All 15
Cvelist	CVE-2023-40035 Craft CMS vulnerable to Remote Code Execution via validatePath bypass	23 Aug 202320:05	–	cvelist
Cvelist	CVE-2024-52293 Craft has a Potential Remote Code Execution via missing path normalization & Twig SSTI	13 Nov 202416:04	–	cvelist
Vulnrichment	CVE-2023-40035 Craft CMS vulnerable to Remote Code Execution via validatePath bypass	23 Aug 202320:05	–	vulnrichment
Vulnrichment	CVE-2024-52293 Craft has a Potential Remote Code Execution via missing path normalization & Twig SSTI	13 Nov 202416:04	–	vulnrichment
OSV	Craft CMS vulnerable to Remote Code Execution via validatePath bypass	21 Aug 202319:58	–	osv
OSV	CVE-2023-40035	23 Aug 202321:15	–	osv
OSV	Craft CMS vulnerable to Potential Remote Code Execution via missing path normalization & Twig SSTI	13 Nov 202414:16	–	osv
OSV	CVE-2024-52293	13 Nov 202416:15	–	osv
NVD	CVE-2023-40035	23 Aug 202321:15	–	nvd
NVD	CVE-2024-52293	13 Nov 202416:15	–	nvd

Vulners

Node

craftcms craft_cmsRange3.0.0–3.8.14

craftcms craft_cmsRange4.0.0-RC1–4.4.14

Source	Link
github	www.github.com/craftcms/cms/security/advisories/GHSA-44wr-rmwq-3phw
github	www.github.com/craftcms/cms/commit/0bd33861abdc60c93209cff03eeee54504d3d3b5
github	www.github.com/craftcms/cms/releases/tag/3.8.15
github	www.github.com/craftcms/cms/releases/tag/4.4.15
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-40035
github	www.github.com/advisories/GHSA-44wr-rmwq-3phw

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

21 Aug 2023 19:58Current

6.9Medium risk

Vulners AI Score6.9

EPSS0.004

CWE-74