Описание
CraftCMS allows remote attacker to execute arbitrary code via crafted script to Section parameter
An issue found in CraftCMS v.3.8.1 allows a remote attacker to execute arbitrary code via a crafted script to the Section parameter.
Пакеты
Наименование
craftcms/cms
composer
Затронутые версииВерсия исправления
<= 3.8.1
Отсутствует
Связанные уязвимости
CVSS3: 8.8
nvd
больше 2 лет назад
An issue found in CraftCMS v.3.8.1 allows a remote attacker to execute arbitrary code via a crafted script to the Section parameter.