-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stemmed from unsanitized user input in condition configurations. The key commit 7359d18 shows the vulnerable code path in ConditionsController.php directly used request parameters to build condition objects. Attackers could craft 'config[name]' payloads with 'on event' keys that Yii would interpret as event handlers, leading to arbitrary object instantiation. The introduction of Component::cleanseConfig in the patch explicitly removes these dangerous keys, confirming their role in the exploit chain. The CWE-94 classification and remote code execution impact directly map to this unsafe parameter handling pattern.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| craftcms/cms | composer | >= 4.0.0-RC1, <= 4.4.14 | 4.4.15 |