CVE-2023-40035: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

August 23, 2023 (updated August 29, 2023)

Improper Neutralization of Special Elements used in an OS Command (‘OS Command Injection’) in craftcms/cms.

References

github.com/advisories/GHSA-44wr-rmwq-3phw
github.com/craftcms/cms/commit/0bd33861abdc60c93209cff03eeee54504d3d3b5
github.com/craftcms/cms/releases/tag/3.8.15
github.com/craftcms/cms/releases/tag/4.4.15
github.com/craftcms/cms/security/advisories/GHSA-44wr-rmwq-3phw

Detect and mitigate CVE-2023-40035 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →