Craft CMS vulnerable to Remote Code Execution via validatePath bypass
CVE-2023-40035

7.2HIGH

Key Information:

Vendor

Craftcms

Status
Cms
Vendor
CVE Published:
23 August 2023

What is CVE-2023-40035?

Craft CMS is subject to a vulnerability that allows authenticated users with certain configurations to bypass the validatePath function, potentially leading to remote code execution. This flaw can enable malicious actors to gain control over systems and exfiltrate sensitive data. Although it primarily affects users with the ALLOW_ADMIN_CHANGES set to true, the risk of exploitation underscores the critical need for immediate patching. Versions 3.8.15 and 4.4.15 address this issue, reinforcing the importance of keeping software up to date.

Affected Version(s)

cms >= 4.0.0-RC1, < 4.4.15 < 4.0.0-RC1, 4.4.15

cms >= 3.0.0, < 3.8.15 < 3.0.0, 3.8.15

References

https://github.com/craftcms/cms/security/advisories/GHSA-...
x_refsource_CONFIRM
https://github.com/craftcms/cms/commit/0bd33861abdc60c932...
x_refsource_MISC
https://github.com/craftcms/cms/releases/tag/3.8.15
x_refsource_MISC

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2023-40035 : Craft CMS vulnerable to Remote Code Execution via validatePath bypass