Improper Authorization

Craft CMS is vulnerable to Improper Authorization. The vulnerability is due to missing authorization checks for the source asset during file replacement, where providing both assetId and sourceAssetId bypasses source delete permission validation, allowing authenticated users to delete assets from...

RHSA-2024:8686

creationtimestamp| type| source ---|---|--- 2025-02-27 17:25:18+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5724 2025-03-11 02:40:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7100 2025-04-10 21:49:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11358...

RHSA-2024:4884

creationtimestamp| type| source ---|---|--- 2025-02-26 03:24:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5443 2025-03-03 14:30:00+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6207 2025-06-25 00:49:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19413...

RHSA-2024:5144

creationtimestamp| type| source ---|---|--- 2025-01-09 22:16:14+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1110 2025-02-26 04:24:30+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5446 2025-03-03 14:30:00+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6207 2025-06-18 19:39:59+00:00...

CVE-2024-21983

creationtimestamp| type| source ---|---|--- 2024-02-16 21:31:43+00:00| seen| https://t.me/ctinow/186642 2024-02-17 00:21:27+00:00| seen| https://t.me/ctinow/186704...

CVE-2023-39941

creationtimestamp| type| source ---|---|--- 2024-02-14 17:03:12+00:00| seen| https://t.me/ctinow/184817 2024-03-06 14:41:23+00:00| seen| https://t.me/ctinow/201395...

CVE-2024-21589

creationtimestamp| type| source ---|---|--- 2024-01-12 02:26:24+00:00| seen| https://t.me/ctinow/167009 2024-01-30 18:46:19+00:00| seen| https://t.me/ctinow/176174...

CVE-2023-50992

creationtimestamp| type| source ---|---|--- 2023-12-20 23:42:35+00:00| seen| https://t.me/ctinow/157395 2023-12-22 23:16:59+00:00| seen| https://t.me/ctinow/158652 2024-01-14 08:36:54+00:00| seen| https://t.me/ctinow/167960...

CVE-2023-0814

creationtimestamp| type| source ---|---|--- 2023-02-14 07:30:29+00:00| seen| https://t.me/cibsecurity/58056 2023-04-27 07:39:59+00:00| seen| https://t.me/cibsecurity/62962...

CVE-2021-24155

creationtimestamp| type| source ---|---|--- 2021-07-10 16:29:07+00:00| published-proof-of-concept| Telegram/eMoVbCeI-n-jaFKeB-W9ZjnKBEe6KGFrv-r960DcFriPRg 2021-07-20 21:02:32+00:00| seen|...