CVE-2023-41892 PoC — Craft CMS Remote Code Execution vulnerability

Source

https://github.com/zaenhaxor/CVE-2023-41892

Associated Vulnerability

Title: Craft CMS Remote Code Execution vulnerability (CVE-2023-41892)
Description:Craft CMS is a platform for creating digital experiences. This is a high-impact, low-complexity attack vector. Users running Craft installations before 4.4.15 are encouraged to update to at least that version to mitigate the issue. This issue has been fixed in Craft CMS 4.4.15.

Description

CVE-2023-41892 - Craft CMS Remote Code Execution (RCE)

Readme

CVE-2023-41892 - Craft CMS Remote Code Execution (RCE)

#### referensi:
#### https://github.com/advisories/GHSA-4w8r-3xrw-v25g
#### https://securityonline.info/craft-cms-fixes-rce-cve-2023-41892-flaw-rated-10-out-of-10-on-severity-scale/
#### https://blog.calif.io/p/craftcms-rce

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →