Description
Craft CMS 是一套内容管理系统。2023年9月，官方发布安全公告，披露 CVE-2023-41892 前台远程代码执行漏洞，攻击者可构造恶意请求执行任意代码，控制服务器。
Craft CMS 远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/0day404/HV-2024-POC/blob/main/Craft%20CMS%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9ECVE-2023-41892.md
https://cloud.tencent.com/developer/article/2549735
https://inc.xmu.edu.cn/info/1041/8171.htm
https://stack.chaitin.com/vuldb/detail/92cdc2ed-2e8a-4632-9782-3dd8561259bd
https://www.tenablecloud.cn/plugins/was/114614
https://nvd.nist.gov/vuln/detail/CVE-2025-23209
https://www.exploit-db.com/exploits/51918
https://craftcms.com/knowledge-base/craft-cms-cve-2025-32432
https://www.assetnote.io/resources/research/how-an-obscure-php-footgun-led-to-rce-in-craft-cms/