VDB
BDU%3A2025-00007
BDU%3A2025-00007
PUBLISHED
CVSS 7.5 HIGH
Уязвимость конфигурации register_argc_argv системы управления контентом Craft CMS, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
7.5
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Crafter Software Corporation | Crafter CMS |
Timeline
- Jan 3, 2025 CVE Published
- Jun 16, 2025 CVE Updated
References
- https://github.com/craftcms/cms/commit/82e893fb794d30563da296bca31379c0df0079b3 url
- https://github.com/craftcms/cms/security/advisories/GHSA-2p6p-9rc9-62j9 url
- https://vuldb.com/?id.288870 url
- https://github.com/Chocapikk/CVE-2024-56145 url
- https://www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv url
- https://github.com/craftcms/cms/releases/tag/5.5.2 advisory
- https://github.com/craftcms/cms/releases/tag/4.13.2 advisory