Packagist/pyrocms/pyrocms CVE-2023-29689: critical 9.8, EPSS 53.46%
PyroCMS remote code execution vulnerability
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 3.9 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-w7vm-4v3j-vgpw
- https://nvd.nist.gov/vuln/detail/CVE-2023-29689
- https://cupc4k3.lol/ssti-leads-to-rce-on-pyrocms-7515be27c811
- https://github.com/pyrocms/pyrocms
- http://packetstormsecurity.com/files/174088/Pyro-CMS-3.9-Server-Side-Template-Injection.html
CVE-2023-29689 · published · modified · JSON