CVE - CVE-2024-21622

CVE-ID
CVE-2024-21622	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Craft is a content management system. This is a potential moderate impact, low complexity privilege escalation vulnerability in Craft starting in 3.x prior to 3.9.6 and 4.x prior to 4.4.16 with certain user permissions setups. This has been fixed in Craft 4.4.16 and Craft 3.9.6. Users should ensure they are running at least those versions.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://github.com/craftcms/cms/blob/develop/CHANGELOG.md#4511---2023-11-16 URL:https://github.com/craftcms/cms/blob/develop/CHANGELOG.md#4511---2023-11-16 MISC:https://github.com/craftcms/cms/blob/v3/CHANGELOG.md#396---2023-11-16 URL:https://github.com/craftcms/cms/blob/v3/CHANGELOG.md#396---2023-11-16 MISC:https://github.com/craftcms/cms/commit/76caf9af07d9964be0fd362772223be6a5f5b6aa URL:https://github.com/craftcms/cms/commit/76caf9af07d9964be0fd362772223be6a5f5b6aa MISC:https://github.com/craftcms/cms/commit/be81eb653d633833f2ab22510794abb6bb9c0843 URL:https://github.com/craftcms/cms/commit/be81eb653d633833f2ab22510794abb6bb9c0843 MISC:https://github.com/craftcms/cms/pull/13931 URL:https://github.com/craftcms/cms/pull/13931 MISC:https://github.com/craftcms/cms/pull/13932 URL:https://github.com/craftcms/cms/pull/13932 MISC:https://github.com/craftcms/cms/security/advisories/GHSA-j5g9-j7r4-6qvx URL:https://github.com/craftcms/cms/security/advisories/GHSA-j5g9-j7r4-6qvx
Assigning CNA
GitHub (maintainer security advisories)
Date Record Created
20231229	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20231229)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)