Description

Acunetix determined that the Craft CMS is vulnerable to remote code execution.

Remediation

Upgrade to the latest version of Craft CMS

References

Craft CMS Remote Code Execution vulnerability

CraftCMS RCE

Related Vulnerabilities

PHP version older than 5.2.1

WordPress Plugin BJ Lazy Load Remote Code Execution (0.7.5)

WordPress Plugin open-flash-chart-core Remote Code Execution (0.4)

WordPress Plugin Master Popups Remote Code Execution (1.0.0)

Check for apache versions up to 1.3.25, 2.0.38

Severity

Critical

Classification

CVE-2023-41892 CWE-94 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L

Tags

Code Execution