| Package | Affected versions | Patched versions |
|---|---|---|
| craftcms/cms | ≥ 4.0.0-RC1, < 4.4.15 | 4.4.15 |
| craft cms | ≥ 4.4.0, < 4.4.15 | 4.4.15 |
This is a high-impact, low-complexity attack vector. Users running Craft installations before 4.4.15 are encouraged to update to at least that version to mitigate the issue.
php craft setup/security-key command and copying the updated CRAFT_SECURITY_KEY environment variable to all production environments.php craft resave/users --set passwordResetRequired --to "fn() => true".https://github.com/craftcms/cms/commit/7359d18d46389ffac86c2af1e0cd59e37c298857
https://github.com/craftcms/cms/commit/a270b928f3d34ad3bd953b81c304424edd57355e
https://github.com/craftcms/cms/blob/develop/CHANGELOG.md#4415---2023-07-03-critical
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free