Advisories · Weakness
CWE-479.
Every Advisory and CVE whose sources give the weakness CWE-479, newest first.
- CVSS 8.6 High
Craft CMS has Potential Authenticated Remote Code Execution via Malicious Attached Behavior
- Code injection
- CWE-479
>=4.0.0, <4.17.12 || >=5.0.0, <5.9.18 · fixed in 4.17.12, 5.9.18
GHSA-qrgm-p9w5-rrfw · CVE-2026-44011 -
htmldoc: Null pointer dereference in the htmldoc v1.9.11 and before may allow attackers to execute…
- htmldoc
- CWE-479