Skip to content

Known CVE

Craft CMS - Remote Code Execution via Template Path Manipulation

This template identifies a critical Remote Code Execution (RCE) vulnerability in Craft CMS, identified as GHSA-2p6p-9rc9-62j9. The vulnerability exists due to improper handling of the `--templatesPath` query parameter, allowing attackers to execute arbitrary code by referencing malicious Twig templates.

CVE-2024-56145

Critical2024CVSS 9.3CWE-94

cve2024 · rce · craftcms · ssti · kev · vkev · vuln

Verified scans run this check after you prove you own the site.

All known CVEsView the checks catalogNational Vulnerability Database

Scan a website