References https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/cms/CraftCMS-%E6%9C%AA%E6%8E%88%E6%9D%83%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E-CVE-2023-41892.md https://avd.aliyun.com/detail?id=AVD-2023-41892 https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/Craft/Craft%20CMS%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9ECVE-2023-41892.md https://cloud.tencent.com/developer/article/2332249 http://www.bmth666.cn/2023/09/26/CVE-2023-41892-CraftCMS%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E%E5%88%86%E6%9E%90/index.html https://threatprotect.qualys.com/2023/09/25/craft-cms-remote-code-execution-vulnerability-cve-2023-41892/ https://security.snyk.io/vuln/SNYK-PHP-CRAFTCMSCMS-5901521 https://nvd.nist.gov/vuln/detail/CVE-2023-41892 https://www.exploit-db.com/exploits/51918 https://github.com/0xfalafel/CraftCMS_CVE-2023-41892 https://www.rapid7.com/db/modules/exploit/linux/http/craftcms_unauth_rce_cve_2023_41892/ https://github.com/vulhub/vulhub/blob/master/craftcms/CVE-2023-41892/README.md https://github.com/craftcms/cms/security/advisories/GHSA-4w8r-3xrw-v25g
Related VulnerabilitiesPoCcraftcms-debug-exposure: CraftCMS Debug Methods ExposedPoCcraftcms-install-exposure: Craft CMS Installation Wizard ExposurePoCcraftcms-log-disclosure: Craft CMS - Log File DisclosurePoCCVE-2021-41749: CraftCMS SEOmatic - Server-Side Template InjectionPoCCVE-2023-41892: CraftCMS < 4.4.15 - Unauthenticated Remote Code ExecutionPoCCVE-2025-32432: CraftCMS - Remote Code ExecutionCraftCms 代码注入漏洞(CVE-2025-32432)CraftCMS ConditionsController.php 代码执行CraftCMS /ConditionsController.php 代码执行漏洞(CVE-2023-41892)Craft CMS CVE-2023-41892 远程代码执行漏洞