CVE-2024-26483
An arbitrary file upload vulnerability in the Profile Image module of Kirby CMS v4.1.0 allows attackers to execute arbitrary code via a crafted PDF file.
| Software | From | Fixed in |
|---|---|---|
getkirby / cms
|
- | 3.6.6.5 |
|
getkirby / cms
|
3.7.0 | 3.7.5.4 |
|
getkirby / cms
|
3.8.0 | 3.8.4.3 |
|
getkirby / cms
|
3.9.0 | 3.9.8.1 |
|
getkirby / cms
|
3.10.0 | 3.10.0.x |
|
getkirby / cms
|
3.10.0 | 3.10.0.1 |
|
getkirby / cms
|
4.0.0 | 4.1.1 |
| getkirby / kirby | - | 3.6.6.5 |
| getkirby / kirby | 3.7.0 | 3.7.5.4 |
| getkirby / kirby | 3.8.0 | 3.8.4.3 |
| getkirby / kirby | 3.9.0 | 3.9.8.1 |
| getkirby / kirby | 4.0.0 | 4.1.1.x |
| getkirby / kirby | 3.10.0 | 3.10.0.x |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime