CVE-2025-32432

CVSS 3.1 Score 10 of 10 (high)

Details

Published Apr 25, 2025
Updated: Apr 28, 2025
CWE ID 94

Summary

CVE-2025-32432 is a remote code execution vulnerability affecting Craft CMS versions 3.0.0-RC1 to 3.9.15, 4.0.0-RC1 to 4.14.15, and 5.0.0-RC1 to 5.6.17. This issue allows an attacker to execute arbitrary code on a vulnerable system, leading to significant security risks. This high-impact vulnerability has a low complexity of exploitation. It has been addressed in Craft CMS versions 3.9.15, 4.14.15, and 5.6.17, making it essential for users to update their systems to avoid potential exploitation. Additionally, this patch resolves another vulnerability, CVE-2023-41892.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share