{"action":"Upgrade craftcms/cms to 3.9.15 or later.","affected":[{"fixed":"3.9.15","introduced":"3.0.0-RC1"},{"fixed":"4.14.15","introduced":"4.0.0-RC1"},{"fixed":"5.6.17","introduced":"5.0.0-RC1"}],"component":"craftcms/cms","cve_ids":["CVE-2025-32432"],"ecosystem":"Packagist","epss":0.99792,"exploited":true,"fixed_versions":["3.9.15","4.14.15","5.6.17"],"ghsa_id":"GHSA-f3gw-9ww9-jmc3","id":"tcs_01M5KF1CXM6A6BNNDE9ZRNHBVQ","modified_at":"2026-03-20T22:00:09.008034Z","published_at":"2025-04-25T15:02:53Z","references":["https://osv.dev/vulnerability/GHSA-f3gw-9ww9-jmc3","https://github.com/craftcms/cms/security/advisories/GHSA-4w8r-3xrw-v25g","https://github.com/craftcms/cms/security/advisories/GHSA-f3gw-9ww9-jmc3","https://nvd.nist.gov/vuln/detail/CVE-2025-32432","https://github.com/craftcms/cms/commit/e1c85441fa47eeb7c688c2053f25419bc0547b47","https://craftcms.com/knowledge-base/craft-cms-cve-2025-32432","https://github.com/craftcms/cms","https://github.com/craftcms/cms/blob/3.x/CHANGELOG.md#3915---2025-04-10-critical","https://github.com/craftcms/cms/blob/4.x/CHANGELOG.md#41415---2025-04-10-critical","https://github.com/craftcms/cms/blob/5.x/CHANGELOG.md#5617---2025-04-10-critical","https://sensepost.com/blog/2025/investigating-an-in-the-wild-campaign-using-rce-in-craftcms","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-32432"],"severity":{"label":"critical","score":10},"sources":[{"source":"osv","source_id":"GHSA-f3gw-9ww9-jmc3","url":"https://osv.dev/vulnerability/GHSA-f3gw-9ww9-jmc3"},{"source":"kev","source_id":"CVE-2025-32432","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}],"summary":"Craft CMS Allows Remote Code Execution"}