Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
added 2026/02/09 8:36 p.m.14 views

Craft CMS Vulnerable to potential authenticated Remote Code Execution via malicious attached Behavior

Relationship to Previously Patched Vulnerability This vulnerability is in addition to the RCE vulnerability patched in GHSA-255j-qw47-wjh5. That advisory addressed a similar RCE vulnerability that affected two specific routes: - /index.php?p=admin%2Factions%2Ffields%2Fapply-layout-element-setting...

8.6CVSS6.3AI score0.0097EPSS
SaveExploits1References6Affected Software1
Rows per page
Query Builder