Craft CMS contains multiple authenticated remote code execution vulnerabilities including: (1) RCE via Twig group filter array-callable, (2) Twig sandbox allowlist bypass that discloses sensitive values, (3) RCE via Twig sandbox 'on/as' behavior injection in Asset::getMimeType transform, (4) RCE via Twig sandbox 'on/as' behavior injection in uncleansed getNext/getPrev/getOwners criteria, and (5) Authenticated admin RCE via Content Block field-layout JSON-string cleanse.
| Vendor | Product | Versions |
|---|---|---|
| craft cms | craft cms | < 4.18.8, < 5.11.0 |
Loading…
