ByteOS Network

Vulnerability Details :

CVE-2023-32679

Assigner Org ID-a0819718-46f1-4df5-94e2-005712e83aaa

Published At-19 May, 2023 | 19:40

Updated At-12 Feb, 2025 | 16:37

Remote Code Execution via unrestricted file extension in Craft CMS

Craft CMS is an open source content management system. In affected versions of Craft CMS an unrestricted file extension may lead to Remote Code Execution. If the name parameter value is not empty string('') in the View.php's doesTemplateExist() -> resolveTemplate() -> _resolveTemplateInternal() -> _resolveTemplate() function, it returns directly without extension verification, so that arbitrary extension files are rendered as twig templates. When attacker with admin privileges on a DEV or an improperly configured STG or PROD environment, they can exploit this vulnerability to remote code execution. Code execution may grant the attacker access to the host operating system. This issue has been addressed in version 4.4.6. Users are advised to upgrade. There are no known workarounds for this vulnerability.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:GitHub_M

Assigner Org ID:a0819718-46f1-4df5-94e2-005712e83aaa

Published At:19 May, 2023 | 19:40

Updated At:12 Feb, 2025 | 16:37

▼CVE Numbering Authority (CNA)

Remote Code Execution via unrestricted file extension in Craft CMS

Affected Products

Vendor

craftcms

Product

cms

Versions

Affected

>= 4.0.0, < 4.4.6

Problem Types

Type	CWE ID	Description
CWE	CWE-74	CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Type: CWE

CWE ID: CWE-74

Description: CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Metrics

Version	Base score	Base severity	Vector
3.1	7.2	HIGH	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Version: 3.1

Base score: 7.2

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

References

Hyperlink	Resource
https://github.com/craftcms/cms/security/advisories/GHSA-vqxf-r9ph-cc9c	x_refsource_CONFIRM

Hyperlink: https://github.com/craftcms/cms/security/advisories/GHSA-vqxf-r9ph-cc9c

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

1. CVE Program Container

References

Hyperlink	Resource
https://github.com/craftcms/cms/security/advisories/GHSA-vqxf-r9ph-cc9c	x_refsource_CONFIRM x_transferred

Hyperlink: https://github.com/craftcms/cms/security/advisories/GHSA-vqxf-r9ph-cc9c

Resource:

x_refsource_CONFIRM

x_transferred

2. CISA ADP Vulnrichment

Metrics Other Info

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:security-advisories@github.com

Published At:19 May, 2023 | 20:15

Updated At:26 May, 2023 | 17:33

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	7.2	HIGH	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Secondary	3.1	7.2	HIGH	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 3.1

Base score: 7.2

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Type: Secondary

Version: 3.1

Base score: 7.2

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CPE Matches

craftcms>>craft_cms>>Versions from 4.0.0(inclusive) to 4.4.6(exclusive)

cpe:2.3:a:craftcms:craft_cms:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-74	Primary	security-advisories@github.com

CWE ID: CWE-74

Type: Primary

Source: security-advisories@github.com

References

Hyperlink	Source	Resource
https://github.com/craftcms/cms/security/advisories/GHSA-vqxf-r9ph-cc9c	security-advisories@github.com	Exploit Vendor Advisory

Hyperlink: https://github.com/craftcms/cms/security/advisories/GHSA-vqxf-r9ph-cc9c

Source: security-advisories@github.com

Resource:

Exploit

Vendor Advisory

Similar CVEs

106Records found

CVE-2012-2931

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-7.2||HIGH

EPSS-0.94% / 75.30%

7 Day CHG~0.00%

Published-09 Jan, 2020 | 20:56

Updated-06 Aug, 2024 | 19:50

PHP code injection in TinyWebGallery before 1.8.8 allows remote authenticated users with admin privileges to inject arbitrary code into the .htusers.php file.

Vendor-tinywebgallery n/a

Product-tinywebgallery n/a

CWE ID-CWE-74

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

CVE-2011-4558

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-7.2||HIGH

EPSS-3.40% / 86.93%

7 Day CHG~0.00%

Published-27 Jan, 2020 | 14:40

Updated-07 Aug, 2024 | 00:09

Tiki 8.2 and earlier allows remote administrators to execute arbitrary PHP code via crafted input to the regexres and regex parameters.

Vendor-tiki n/a

Product-tiki n/a

CWE ID-CWE-74

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

CVE-2011-2538

Matching Score-4

Assigner-Cisco Systems, Inc.

View Details

Matching Score-4

Assigner-Cisco Systems, Inc.

CVSS Score-7.2||HIGH

EPSS-2.96% / 85.95%

7 Day CHG~0.00%

Published-28 Oct, 2019 | 20:19

Updated-20 Nov, 2024 | 17:04

Cisco Video Communications Server (VCS) before X7.0.3 contains a command injection vulnerability which allows remote, authenticated attackers to execute arbitrary commands.

Vendor-Cisco Systems, Inc.

Product-telepresence_video_communication_server Cisco Video Communications Server (VCS)

CWE ID-CWE-74

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

CVE-2022-31658

Matching Score-4

Assigner-VMware by Broadcom

View Details

Matching Score-4

Assigner-VMware by Broadcom

CVSS Score-7.2||HIGH

EPSS-7.73% / 91.58%

7 Day CHG~0.00%

Published-05 Aug, 2022 | 15:07

Updated-03 Aug, 2024 | 07:26

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a remote code execution vulnerability. A malicious actor with administrator and network access can trigger a remote code execution.

Vendor-n/a Linux Kernel Organization, Inc VMware (Broadcom Inc.)Microsoft Corporation

Product-access_connector linux_kernel identity_manager_connector one_access windows identity_manager VMware Workspace ONE Access, Identity Manager and vRealize Automation

CWE ID-CWE-74

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

CVE-2024-34544

Matching Score-4

Assigner-Talos

View Details

Matching Score-4

Assigner-Talos

CVSS Score-9.1||CRITICAL

EPSS-0.33% / 55.40%

7 Day CHG~0.00%

Published-14 Jan, 2025 | 14:21

Updated-21 Aug, 2025 | 18:46

A command injection vulnerability exists in the wireless.cgi AddMac() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.

Vendor-WAVLINK Technology Ltd.

Product-wl-wn533a8_firmware wl-wn533a8 Wavlink AC3000

CWE ID-CWE-74

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

CVE-2022-35735

Matching Score-4

Assigner-F5, Inc.

View Details

Matching Score-4

Assigner-F5, Inc.

CVSS Score-7.2||HIGH

EPSS-1.63% / 81.14%

7 Day CHG~0.00%

Published-04 Aug, 2022 | 17:50

Updated-17 Sep, 2024 | 01:47

BIG-IP monitor configuration vulnerability CVE-2022-35735

In BIG-IP Versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and all versions of 13.1.x, an authenticated attacker with Resource Administrator or Manager privileges can create or modify existing monitor objects in the Configuration utility in an undisclosed manner leading to a privilege escalation. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Vendor-F5, Inc.

Product-big-ip_application_acceleration_manager big-ip_link_controller big-ip_policy_enforcement_manager big-ip_fraud_protection_service big-ip_global_traffic_manager big-ip_analytics big-ip_access_policy_manager big-ip_domain_name_system big-ip_local_traffic_manager big-ip_advanced_firewall_manager big-ip_application_security_manager BIG-IP

CWE ID-CWE-74

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

CVE-2023-32679

Credits

Remote Code Execution via unrestricted file extension in Craft CMS

Vendors

Products

Metrics (CVSS)

Weaknesses

Attack Patterns

Solution/Workaround

References

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

Stakeholder-Specific Vulnerability Categorization (SSVC)

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History

Similar CVEs