high7.2
CVE-2023-24676
Arbitrary Code Execution in Processwire
Impact
An issue found in Processwire 3.0.210 allows attackers to execute arbitrary code and install a reverse shell via the download_zip_url parameter when installing a new module.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | processwire/processwire | <= 3.0.210 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Processwire | Processwire | Version 3.0.210 |