Threats tagged 'ghsa-6pc2-3wgv-f5mj'

Craft CMS versions from 5.10.0 up to but not including 5.11.2 contain a remote code execution vulnerability. This flaw allows non-administrator control panel users to obtain HMAC-signed Twig templates via the app/render-elements endpoint. By submitting the signed template returnUrl as a login redirect parameter, attackers can trigger unsandboxed evaluation of renderObjectTemplate(), leading to execution of arbitrary OS commands as the PHP worker.