---
id: 8910
title: "[CVE-2023-41892] CraftCMS RCE"
cve: CVE-2023-41892
source_domain: calif.io
source_url: "https://calif.io/research/craftcms-rce"
published_at: "2023-09-14T00:00:00Z"
tags: ["rce", "vulnerability-research", "php", "web-security", "web", "craftcms", "cve-2023-41892"]
phying_url: "https://phying.com/item/8910"
lang: en
---

# [CVE-2023-41892] CraftCMS RCE

## Summary

# CraftCMS RCE Chaining a file write into remote code execution on CraftCMS. Thanh Nguyen September 14, 2023 webphp > Craft is a flexible, user-friendly CMS for creating custom digital experiences...

## Intelligence Metadata

- **Sources:** calif.io
- **CVE:** CVE-2023-41892
- **Published:** 2023-09-14T00:00:00Z
- **Original:** https://calif.io/research/craftcms-rce
- **Phying News:** https://phying.com/item/8910