PT-2023-20922 · Lightcms · Lightcms

Name of the Vulnerable Software and Affected Versions: LightCMS version 1.3.7 Description: The issue is related to a remote code execution RCE vulnerability. It is specifically exploitable via the image:make function. Recommendations: For LightCMS version 1.3.7, as a temporary workaround, conside...

CVE-2023-27060: Missing Authentication for Critical Function

LightCMS v1.3.7 was discovered to contain a remote code execution RCE vulnerability via the image:make function...

CVE-2023-27060

LightCMS v1.3.7 contains a remote code execution (RCE) vulnerability exploitable via the image:make function. Affected software: LightCMS 1.3.7. Root cause: ability to trigger arbitrary code execution through image:make. Impact: high/critical risk (per CVSS 3.1 metrics in the CVE entry). Remediat...