Advisories · Technology
cms.
Every CVE that names cms among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.7 High
Low privilege condition filter escapes Twig sandbox, recovers "securityKey" and reaches RCE
- cms
- Code injection
- CVSS 8.7 High
Control panel only API response emulation replaces "securityKey" and reaches server RCE
- cms
- Code injection
- CVSS 8.7 High
Craft CMS before 4.18.8 and 5.11.0 Twig create() Blocklist Bypass Leading to RCE
- cms
- CWE-184
- CVSS 9.3 CriticalCritical · CVSS 9+
Craft CMS 5.0.0 before 5.11.0 GraphQL Site-Scope Bypass via Mutations
- cms
- Broken access control
- CVSS 8.7 High
Craft CMS 5.0.0 before 5.11.0 Verification Code Reuse via users/set-password
- cms
- Authentication bypass
- CVSS 8.7 High
Craft CMS 5.8.0 before 5.11.0 Admin RCE via ContentBlock Field Layout
- cms
- Code injection
- CVSS 8.7 High
Craft CMS 5.0.0 before 5.11.0 RCE via Twig Sandbox Behavior Injection
- cms
- Code injection
- CVSS 8.7 High
Craft CMS 5.0.0 before 5.11.0 RCE via Asset::getMimeType Transform Injection
- cms
- Code injection
- CVSS 7.1 High
Craft CMS before 4.18.8 and 5.11.0 Twig Sandbox Allowlist Bypass via Array Filters
- cms
- Information disclosure
- CVSS 8.7 High
Craft CMS before 4.18.8 and 5.11.0 Authenticated RCE via Twig group Filter Array-Callable
- cms
- Code injection
- CVSS 8.7 High
Craft CMS 4.0.0 before 4.18.7 and 5.0.0 before 5.10.14 RCE via actionCacheUpdates Behavior Injection
- cms
- Code injection
- CVSS 2.1 Low
Craft CMS 5.0.0 before 5.10.14 DOM XSS via returnUrl in 2FA Verification
- cms
- Cross-site scripting (XSS)
- CVSS 6.0 Medium
Craft CMS 5.0.0 before 5.10.14 Missing Authorization via app/switch-to-licensed-edition
- cms
- Broken access control
- CVSS 8.7 High
Craft CMS 5.10.2 before 5.10.14 Twig Sandbox Bypass RCE via has some/has every
- cms
- Code injection
- CVSS 6.9 Medium
Craft CMS 4.0.0 before 4.18.7 and 5.0.0 before 5.10.14 Arbitrary File Read via Twig create() DOMDocument
- cms
- Information disclosure
- CVSS 8.7 High
Authenticated RCE via render-components Entry Type overrides
- cms
- Code injection
- CVSS 8.7 High
Craft CMS before 5.11.0 Unauthenticated PII Disclosure via GraphQL
- cms
- Information disclosure
- CVSS 8.7 High
Craft CMS 5.10.0 before 5.10.13 Authenticated Remote Code Execution
- cms
- Code injection
- CVSS 8.7 High
Craft CMS before 4.18.6 Remote Code Execution via signed cookie
- cms
- Code injection
- CVSS 8.2 High
Craft CMS 5.0.0 before 5.10.13 Environment Secret Exposure via Installer
- cms
- CWE-636
- CVSS 5.1 Medium
Craft CMS 5.7.0 before 5.10.13 Stored XSS via Generated Fields
- cms
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Craft CMS 5.0.0 before 5.10.13 Broken Access Control via nested-elements/reorder
- cms
- Broken access control
- CVSS 8.7 High
Low-privilege RCE through element-search eager loading
- cms
- Code injection
- CVSS 8.7 High
Craft CMS before 5.10.12 Remote Code Execution via element-index
- cms
- Code injection
- CVSS 7.1 High
Craft CMS 5.0.0-RC1 before 5.10.12 Permission Escalation via UsersController
- cms
- Broken access control
- CVSS 8.7 High
Craft CMS 5.0.0-RC1 before 5.10.12 Behavior Injection RCE
- cms
- Code injection
- CVSS 7.1 High
Authenticated SQL Injection via nested eager-loading criteria
- cms
- SQL injection
- CVSS 8.7 High
GQL entry mutation `siteId` bypasses schema site scope, enabling cross-site content read/write/delete
- cms
- Broken access control
- CVSS 5.3 Medium
Craft CMS 5.7.0 before 5.10.12 Information Disclosure via AssetsController
- cms
- Broken access control
- CVSS 8.7 High
Craft CMS 5.0.0-RC1 before 5.10.11 Authentication Bypass via administrateUsers
- cms
- Broken access control
- CVSS 7.1 High
Craft CMS 5.0.0-RC1 before 5.10.11 File Overwrite via assets/replace-file
- cms
- Broken access control
- CVSS 5.3 Medium
Craft CMS before 5.11.0 PII Disclosure via GraphQL User Relations
- cms
- Broken access control
- CVSS 7.1 High
Craft CMS before 5.10.11 Authorization Bypass via actionDeleteForSite
- cms
- Broken access control
- CVSS 5.3 Medium
Craft CMS 5.0.0-RC1 before 5.10.11 Authorization Bypass via actionDuplicate
- cms
- Broken access control
- CVSS 8.7 High
Craft CMS 5.0.0-RC1 before 5.10.11 GraphQL Entry Mutation Site Scope Bypass
- cms
- Broken access control
- CVSS 9.2 CriticalCritical · CVSS 9+
Craft CMS before 5.10.11 Authentication Bypass via Admin Flag Inheritance
- cms
- Privilege escalation
- CVSS 7.1 High
Craft CMS 5.0.0 through 5.10.10 Authorization Bypass via assets/move-asset
- cms
- Broken access control
- CVSS 4.8 Medium
Craft CMS 5.0.0-RC1 before 5.10.11 Stored XSS via site name
- cms
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Craft CMS before 5.10.11 Broken Access Control via element-indexes
- cms
- Broken access control
- CVSS 8.7 High
Authenticated RCE through Twig sandbox escape
- cms
- CWE-693
- CVSS 8.7 High
Authenticated RCE via `condition.config` JSON cleanse bypass
- cms
- Broken access control
- CVSS 6.9 Medium
Craft CMS 5.0.0-RC1 before 5.10.6 SSRF via GraphQL asset mutation
- cms
- Server-side request forgery (SSRF)