Medium · published May 7, 2025
CVSS calls it medium at 6.9. It is confirmed in active exploitation. It sits in the 71.3th percentile for exploit probability.
⚠️ Unauthenticated users can sneak in arbitrary content! Craft CMS allows this through its session files, which can be accessed and exploited if you're not careful! 🔥 Think of it like a restaurant taking orders without checking IDs. An unauthorized customer could potentially scribble down anything they want on the order slip, including something harmful, and the kitchen would prepare it without a second thought. If an attacker takes advantage of this, they could execute arbitrary PHP code on your server, leading to unauthorized access and data breaches. This could mean exposing sensitive information or even taking full control of the site—a pretty alarming scenario!
Think of it like a restaurant taking orders without checking IDs. An unauthorized customer could potentially scribble down anything they want on the order slip, including something harmful, and the kitchen would prepare it without a second thought. Craft CMS stores content from unauthenticated users in session files without proper sanitization. This allows attackers to inject harmful values into the session files, which could later be executed due to another vulnerability.
If an attacker takes advantage of this, they could execute arbitrary PHP code on your server, leading to unauthorized access and data breaches. This could mean exposing sensitive information or even taking full control of the site—a pretty alarming scenario! To remediate this, immediately upgrade to Craft CMS versions 5.7.5 or 4.15.3. Ensure session files are properly sanitized before storing any user-generated content, and review your server's security settings. Act fast to limit exposure! You've got this! Follow these steps and secure your Craft CMS environment in no time! 🛡️