Critical Craft CMS Vulnerability: CVE-2024-56145

A critical vulnerability (CVE-2024-56145) in Craft CMS, a PHP-based content management system, allows remote code execution due to improper handling of PHP’s register_argc_argv setting. Attackers can exploit this flaw to execute malicious code by manipulating query string parameters, potentially compromising affected websites. Versions prior to 5.5.2 and 4.13.2 are vulnerable, necessitating immediate upgrades and disabling register_argc_argv. The vulnerability highlights the importance of regular security audits and responsible PHP configuration. Craft CMS has released patches and provided guidance to mitigate the risk.keepSave to notecopy_alldocsAdd noteaudio_magic_eraserAudio OverviewschoolBriefing doc

Critical Craft CMS Vulnerability
Technijian
Critical Craft CMS Vulnerability: CVE-2024-56145
Loading
/