← Back to browse · API

CVE-2024-37843

Severity

HIGH

CVSS

7.5

EPSS

0.53242

Risk score

48.63

CISA KEV

No

PoC

No

Published

2024-06-25

Modified

2024-08-02

First seen

2026-08-08

Aliases

EUVD-2024-2074, GHSA-HQ4F-MV3Q-8WCV

Products

n/a:n/a n/a

Sources

euvd EUVD-2024-2074

Description

Craft CMS up to v3.7.31 was discovered to contain a SQL injection vulnerability via the GraphQL API endpoint.

References