Potential RCE with a compromised security key in craft/cms

Low privilege condition filter escapes Twig sandbox, recovers "securityKey" and reaches RCE

Control panel only API response emulation replaces "securityKey" and reaches server RCE

Craft CMS 5.0.0 before 5.11.0 RCE via Twig Sandbox Behavior Injection

Craft CMS 5.0.0 before 5.11.0 RCE via Asset::getMimeType Transform Injection

Craft CMS before 4.18.8 and 5.11.0 Authenticated RCE via Twig group Filter Array-Callable

Craft CMS 4.0.0 before 4.18.7 and 5.0.0 before 5.10.14 RCE via actionCacheUpdates Behavior Injection

Craft CMS 5.10.2 before 5.10.14 Twig Sandbox Bypass RCE via has some/has every

Authenticated RCE via render-components Entry Type overrides

Craft CMS 5.10.0 before 5.10.13 Authenticated Remote Code Execution

Craft CMS before 4.18.6 Remote Code Execution via signed cookie

Low-privilege RCE through element-search eager loading

Craft CMS before 5.10.12 Remote Code Execution via element-index

Craft CMS 5.0.0-RC1 before 5.10.12 Behavior Injection RCE

Craft CMS 5.0.0-RC1 before 5.10.11 Authentication Bypass via administrateUsers

Craft CMS 5.0.0-RC1 before 5.10.11 GraphQL Entry Mutation Site Scope Bypass

Craft CMS 5.0.0-RC1 before 5.10.7 Remote Code Execution via Twig Sandbox Escape

Craft CMS 5.0.0-RC1 before 5.10.6 Authenticated RCE via condition.config

CraftCMS's `ElementSearchController` Affected by Blind SQL Injection

CraftCMS has an RCE vulnerability via relational conditionals in the control panel

GQL entry mutation `siteId` bypasses schema site scope, enabling cross-site content read/write/delete

Arbitrary user password reset leading to administrator account takeover

Authenticated RCE through Twig sandbox escape

Authenticated RCE via `condition.config` JSON cleanse bypass

Craft CMS: Potential authenticated Remote Code Execution via referrer redirect

Craft CMS: Potential authenticated Remote Code Execution via malicious attached Behavior

Craft CMS: Authorship spoofing in `entries/save-entry` via pre-check/post-mutation authorization gap

Craft CMS 5.0.0 before 5.11.0 Verification Code Reuse via users/set-password

Craft CMS before 5.11.0 Unauthenticated PII Disclosure via GraphQL

Craft CMS: DOM XSS via GitHub issue title in CraftSupport widget

Craft CMS before 4.18.8 and 5.11.0 Twig create() Blocklist Bypass Leading to RCE

Craft CMS 5.8.0 before 5.11.0 Admin RCE via ContentBlock Field Layout

Craft CMS - Remote Code Execution via Missing Config Sanitization in FieldsController

Craft CMS: Potential authenticated Remote Code Execution via malicious attached Behavior

Craft CMS vulnerable to behavior injection RCE ElementIndexesController and FieldsController

Craft CMS vulnerable to behavior injection RCE via EntryTypesController

Authenticated SQL Injection via nested eager-loading criteria

Craft CMS 5.0.0-RC1 before 5.10.11 File Overwrite via assets/replace-file

Craft CMS before 5.10.11 Authorization Bypass via actionDeleteForSite

Craft CMS 5.0.0 through 5.10.10 Authorization Bypass via assets/move-asset

Craft CMS: Mass assignment via id in newAttributes during bulk duplicate overwrites existing elements

Craft CMS: Missing peer-permission check in `AssetsController::actionDeleteFolder` allows deletion of other users' assets

Craft CMS: Missing Volume Permission Check in AssetsController::actionShowInFolder Allows Information Disclosure

Craft CMS: Missing Authorization in GraphQL Address Resolver Allows Cross-Scope PII Disclosure