CVE-2025-68456 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Craft is a platform for creating digital experiences. In versions 5.0.0-RC1 through 5.8.20 and 3.0.0 through 4.16.16, unauthenticated users can trigger databas…
High CVSS: 7.0

CVE-2025-68456

Craft is a platform for creating digital experiences. In versions 5.0.0-RC1 through 5.8.20 and 3.0.0 through 4.16.16, unauthenticated users can trigger database backup operations via specific admin actions, potentially leading to resource exhaustion or information disclosure. Users should update to the patched versions (5.8.21 and 4.16.17) to mitigate the issue. Craft 3 users should update to the latest Craft 4 and 5 releases, which include the fixes.
Vendor
Craftcms
Product
Craft Cms
CWE
CWE-202
Yayın Tarihi
2026-01-05 22:15:52
Güncelleme
2026-01-12 18:19:38
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-202 Craft Cms HIGH Craftcms 2026

Referanslar

https://github.com/craftcms/cms/blob/5.x/CHANGELOG.md#5821---2025-12-04 https://github.com/craftcms/cms/commit/f83d4e0c6b906743206b4747db4abf8164b8da39 https://github.com/craftcms/cms/security/advisories/GHSA-v64r-7wg9-23pr https://github.com/craftcms/cms/security/advisories/GHSA-v64r-7wg9-23pr