Does anyone know if the RCE vulnerability in CVE-2023-418925 (Github link) can be exploited without being logged into Craft? I have a couple of smaller sites that I'd rather not update right now.

1 Answer 1


Yes, it can be exploited whether you're logged in or not.

You can find more info at the following links:

  • Hi Jalen, thank you so much for your answer! It really helped me out. I appreciate your time and expertise.
    – Magnus
    Commented Sep 20, 2023 at 6:37
  • @Magnus sure thing, my pleasure 🙌
    – Jalen Davenport
    Commented Sep 20, 2023 at 12:56

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.