遠端主機上安裝的 CraftCMS 版本在啟用 register_argc_argv php 選項時，容易透過特製要求受到遠端程式碼執行 (RCE) 影響。

リモートホストにインストールされている CraftCMS のバージョンは、register_argc_argv PHP オプションが有効になっている場合に、特別に偽造されたリクエストを介したリモートコード実行 (RCE) に対して脆弱です。

启用 register_argc_argv php 选项时，攻击者可通过特别伪造的请求，导致远程主机上安装的 CraftCMS 版本容易受到远程代码执行 (RCE) 漏洞的影响。

The version of CraftCMS installed on the remote host is vulnerable to a Remote Code Execution (RCE) via a specially forged request when the register_argc_argv php option is enabled.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond.
    Users of affected versions are affected by this vulnerability if their php.ini configuration has
    `register_argc_argv` enabled. For these users an unspecified remote code execution vector is present.
    Users are advised to update to version 3.9.14, 4.13.2, or 5.5.2. Users unable to upgrade should disable
    `register_argc_argv` to mitigate the issue. (CVE-2024-56145)

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
114614	CraftCMS < 4.13.2 / 5.x < 5.5.2 遠端程式碼執行	Web App Scanning	Component Vulnerability	2025/3/3	2025/3/11	critical
114614	CraftCMS < 4.13.2 / 5.x < 5.5.2 のリモートコード実行	Web App Scanning	Component Vulnerability	2025/3/3	2025/3/11	critical
114614	CraftCMS < 4.13.2 / 5.x < 5.5.2 远程代码执行	Web App Scanning	Component Vulnerability	2025/3/3	2025/3/11	critical
114614	CraftCMS < 4.13.2 / 5.x < 5.5.2 Remote Code Execution	Web App Scanning	Component Vulnerability	2025/3/3	2025/3/11	critical
409006	SCA: security update for craftcms/cms (GHSA-2p6p-9rc9-62j9)	Tenable Cloud Security	SCA Checks	2025/1/23	2026/7/2	critical
409006	SCA: security update for craftcms/cms (GHSA-2p6p-9rc9-62j9)	Tenable Self-Hosted Container Security	SCA Checks	2025/1/23	2026/7/2	critical

检测

插件搜索

critical

critical

critical

critical

critical

critical