CVE-2023-30130
1 advisory.
Packagist/craftcms/cms CVE-2023-30130: high 8.8
CraftCMS allows remote attacker to execute arbitrary code via crafted script to Section parameter
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 3.8.1 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-fjx5-xm7q-whvj
- https://nvd.nist.gov/vuln/detail/CVE-2023-30130
- https://craftcms.com
- https://github.com/craftcms/cms
- https://tf1t.gitbook.io/mycve/craftcms/server-site-template-injection-on-craftcms-3.8.1
CVE-2023-30130 · published · modified · JSON