Description

Acunetix determined that the Craft CMS is vulnerable to remote code execution.

Remediation

Upgrade to the latest version of Craft CMS

References

Craft CMS Remote Code Execution vulnerability

CraftCMS RCE

Related Vulnerabilities

SharePoint CVE-2021-26420 Vulnerability (CVE-2021-26420)

ColdFusion CFC Deserialization RCE (CVE-2023-26359/CVE-2023-26360)

Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2008-3327)

MySQL CVE-2024-21051 Vulnerability (CVE-2024-21051)

MySQL CVE-2023-22092 Vulnerability (CVE-2023-22092)

Severity

Critical

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L

Tags

Code Execution Known Vulnerabilities CWE-94 CVE-2023-41892