CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
1 advisories matched
2023-09-13
Craft CMS Remote Code Execution (RCE) Vulnerability Security Advisory (CVE-2023-41892)
[Affected Scope] Craft CMS installations running versions prior to 4.4.15
[Impact] Unauthenticated remote attackers can execute arbitrary PHP code and fully compromise the underlying server by sending crafted HTTP requests
[Mitigation] Immediately upgrade Craft CMS to version 4.4.15 or later to resolve the vulnerability