Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
Craft CMS RCE (CVE-2023-41892) - Vulnerability Database

Craft CMS RCE (CVE-2023-41892)

Description

Invicti determined that the Craft CMS is vulnerable to remote code execution.

Remediation

Upgrade to the latest version of Craft CMS

References

Craft CMS Remote Code Execution vulnerability
CraftCMS RCE

Related Vulnerabilities

Sitecore XM/XP Insecure Deserialization (CVE-2025-27218) Critical
Common tags: Code Execution Known Vulnerabilities
Ektron CMS unauthenticated code execution and Local File Read High
Common tags: Code Execution Known Vulnerabilities
PHP CGI Argument Injection (CVE-2024-4577) Critical
Common tags: Code Execution Known Vulnerabilities
Ruby on Rails DoubleTap RCE (CVE-2019-5420) High
Common tags: Code Execution Known Vulnerabilities
Remote Unauthenticated Code Execution Vulnerability in OpenSSH server (CVE-2024-6387) High
Common tags: Code Execution Known Vulnerabilities

Severity

Critical

Classification

CVE-2023-41892
CWE-94
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L

Tags

Code Execution
Known Vulnerabilities