← Back to browse · API

CVE-2023-43661

Severity
CRITICAL
CVSS
9.1
EPSS
0.46904
Risk score
52.82
CISA KEV
No
PoC
No
Published
2023-10-11
Modified
2024-09-17
First seen
2026-08-07
Aliases
EUVD-2023-2753, GHSA-HV79-P62R-WG3P
Products
cachethq:Cachet < 2.4
Sources
euvd EUVD-2023-2753

Description

Cachet, the open-source status page system. Prior to the 2.4 branch, a template functionality which allows users to create templates allows them to execute any code on the server during the bad filtration and old twig version. Commit 6fb043e109d2a262ce3974e863c54e9e5f5e0587 of the 2.4 branch contains a patch for this issue.

References