← All advisories

Critical severityNVD Advisory· Published Jun 25, 2024· Updated Aug 2, 2024

CVE-2024-37843

CVE-2024-37843

Description

Craft CMS up to v3.7.31 was discovered to contain a SQL injection vulnerability via the GraphQL API endpoint.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
craftcms/cmsPackagist	<= 3.7.31	—

Affected products

2

Craft/Craft CMSdescription
ghsa-coords
pkg:composer/craftcms/cms
Range: <= 3.7.31

Patches

Vulnerability mechanics

References

3

github.com/advisories/GHSA-hq4f-mv3q-8wcvghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2024-37843ghsaADVISORY
blog.smithsecurity.biz/craft-cms-unauthenticated-sqli-via-graphqlghsaWEB

News mentions

0

No linked articles in our index yet.