Craft CMS vulnerable to Remote Code Execution via validatePath bypass
CVE-2023-40035
7.2HIGH
Summary
Craft CMS is subject to a vulnerability that allows authenticated users with certain configurations to bypass the validatePath function, potentially leading to remote code execution. This flaw can enable malicious actors to gain control over systems and exfiltrate sensitive data. Although it primarily affects users with the ALLOW_ADMIN_CHANGES set to true, the risk of exploitation underscores the critical need for immediate patching. Versions 3.8.15 and 4.4.15 address this issue, reinforcing the importance of keeping software up to date.
Affected Version(s)
cms >= 4.0.0-RC1, < 4.4.15 < 4.0.0-RC1, 4.4.15
cms >= 3.0.0, < 3.8.15 < 3.0.0, 3.8.15
References
CVSS V3.1
Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved