CVE-2025-23209

Published Jan 18, 2025

Last updated a month ago

Overview

AI description

Generated using AI and has not been reviewed by Intruder. May contain errors.

CVE-2025-23209 is a code injection vulnerability found in Craft CMS versions 4 and 5. Exploitation of this vulnerability allows for remote code execution on affected systems. This vulnerability is only exploitable if an attacker has already compromised the user's security key. The vulnerability arises from inadequate control over code generation, which creates an opportunity for code injection attacks. Patches for this vulnerability are available in Craft CMS versions 5.5.8 and 4.13.8.

Description: Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. This is an remote code execution (RCE) vulnerability that affects Craft 4 and 5 installs where your security key has already been compromised. Anyone running an unpatched version of Craft with a compromised security key is affected. This vulnerability has been patched in Craft 5.5.8 and 4.13.8. Users who cannot update to a patched version, should rotate their security keys and ensure their privacy to help migitgate the issue.
Source: security-advisories@github.com
NVD status: Analyzed

Risk scores

CVSS 3.1

Type: Primary
Base score: 8.1
Impact score: 5.9
Exploitability score: 2.2
Vector string: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity: HIGH

Known exploits

Data from CISA

Vulnerability name: Craft CMS Code Injection Vulnerability
Exploit added on: Feb 20, 2025
Exploit action due: Mar 13, 2025
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Weaknesses

security-advisories@github.com: CWE-94

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:craftcms:craft_cms:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A969ACE2-4C09-452A-B9BD-113CA9A4FF30",
            "versionEndExcluding": "4.13.8",
            "versionStartExcluding": "4.0.0"
          },
          {
            "criteria": "cpe:2.3:a:craftcms:craft_cms:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8DBFB276-7508-492E-ACBA-A229E869A831",
            "versionEndExcluding": "5.5.8",
            "versionStartExcluding": "5.0.0"
          },
          {
            "criteria": "cpe:2.3:a:craftcms:craft_cms:4.0.0:-:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "610F6DE9-720F-45B3-81D5-18E7F6B090FD"
          },
          {
            "criteria": "cpe:2.3:a:craftcms:craft_cms:4.0.0:rc1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "CC2F40FC-7C27-456A-B16D-679410D1D5CF"
          },
          {
            "criteria": "cpe:2.3:a:craftcms:craft_cms:4.0.0:rc2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FBAA8227-04F8-404C-907B-B0162B325F5A"
          },
          {
            "criteria": "cpe:2.3:a:craftcms:craft_cms:4.0.0:rc3:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "21B28E2C-327A-4CE6-ACAD-97E459712A55"
          },
          {
            "criteria": "cpe:2.3:a:craftcms:craft_cms:5.0.0:-:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1C7461CF-35AB-48E1-88B6-956DAE1D2AB4"
          },
          {
            "criteria": "cpe:2.3:a:craftcms:craft_cms:5.0.0:rc1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8D8E02D1-601A-4E2B-B619-4775BFDB72D0"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]