Lucene search

CVE-2023-40035

🗓️ 23 Aug 2023 21:08:15Reported by [email protected]Type

Craft CMS ValidatePath Function Bypas

Reporter	Title	Published	Views	Family All 15
Cvelist	CVE-2023-40035 Craft CMS vulnerable to Remote Code Execution via validatePath bypass	23 Aug 202320:05	–	cvelist
Cvelist	CVE-2024-52293 Craft has a Potential Remote Code Execution via missing path normalization & Twig SSTI	13 Nov 202416:04	–	cvelist
Vulnrichment	CVE-2023-40035 Craft CMS vulnerable to Remote Code Execution via validatePath bypass	23 Aug 202320:05	–	vulnrichment
Vulnrichment	CVE-2024-52293 Craft has a Potential Remote Code Execution via missing path normalization & Twig SSTI	13 Nov 202416:04	–	vulnrichment
OSV	Craft CMS vulnerable to Remote Code Execution via validatePath bypass	21 Aug 202319:58	–	osv
OSV	CVE-2023-40035	23 Aug 202321:15	–	osv
OSV	Craft CMS vulnerable to Potential Remote Code Execution via missing path normalization & Twig SSTI	13 Nov 202414:16	–	osv
OSV	CVE-2024-52293	13 Nov 202416:15	–	osv
Prion	Remote code execution	23 Aug 202321:15	–	prion
CVE	CVE-2023-40035	23 Aug 202321:15	–	cve

Nvd

Node

craftcms craft_cmsRange3.0.0–3.8.15

craftcms craft_cmsRange4.0.0–4.4.15

craftcms craft_cmsMatch4.0.0rc1

Source	Link
github	www.github.com/craftcms/cms/security/advisories/GHSA-44wr-rmwq-3phw
github	www.github.com/craftcms/cms/commit/0bd33861abdc60c93209cff03eeee54504d3d3b5
github	www.github.com/craftcms/cms/releases/tag/3.8.15
github	www.github.com/craftcms/cms/releases/tag/4.4.15

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

23 Aug 2023 21:15Current

7.4High risk

Vulners AI Score7.4

CVSS37.2

EPSS0.004

CWE-74