Filter
AND
Versions
composer/craftcms/cmsCraft CMS Privilege Escalation
8.8
EPSS
0.07%
First published (updated )
Craftcms Craft CmsCraft CMS before 3.7.14 allows CSV injection.
8.8
First published (updated )
Craftcms Craft CmsCraft CMS through 3.7.36 allows a remote unauthenticated attacker, who knows at least one valid user…
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Craftcms Craft CmsCraft has a Local File System Validation Bypass Leading to File Overwrite, Sensitive File Access, and Potential Code Execution
8.5
First published (updated )
composer/craftcms/cmsCraft Allows Attackers to Read Arbitrary System Files
7.7
First published (updated )
composer/craftcms/cmsAn issue discovered in Craft CMS version 4.6.1.1 allows remote attackers to cause a denial of servic…
7.5
First published (updated )
Craftcms Craft CmsCraft CMS Allows TOTP Token To Stay Valid After Use
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Craftcms Craft CmsCraft has a Potential Remote Code Execution via missing path normalization & Twig SSTI
7.2
First published (updated )
Craftcms Craft CmsCraft CMS through 3.0.34 allows remote authenticated administrators to read sensitive information vi…
7.2
First published (updated )
Craftcms Craft CmsRemote Code Execution via unrestricted file extension in Craft CMS
7.2
First published (updated )
Craftcms Craft CmsCraft CMS vulnerable to Remote Code Execution via validatePath bypass
7.2
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.