Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Craft CMS Vulnerability - CVE-2025-32432 - Vulnerability Database
Craft CMS

Craft CMS Vulnerability - CVE-2025-32432

Critical
Reference: CVE-2025-32432
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2025-32432
Title: Craft CMS Vulnerability
Overview:

Craft is a flexible user-friendly CMS for creating custom digital experiences on the web and beyond. Starting from version 3.0.0-RC1 to before 3.9.15 4.0.0-RC1 to before 4.14.15 and 5.0.0-RC1 to before 5.6.17 Craft is vulnerable to remote code execution. This is a high-impact low-complexity attack vector. This issue has been patched in versions 3.9.15 4.14.15 and 5.6.17 and is an additional fix for CVE-2023-41892.