~ / search / GHSA-2cvg-w29m-j8xc

GHSA-2cvg-w29m-j8xc

Arbitrary Code Execution in Processwire

Source: GitHub Advisory Database (reviewed) High CVE-2023-24676

Packages

EcosystemPackageAffectedFixed in
Packagist processwire/processwire <= 3.0.210 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

An issue found in Processwire 3.0.210 allows attackers to execute arbitrary code and install a reverse shell via the download_zip_url parameter when installing a new module.

References

External links from the advisory. They lead to third-party sites.