Codiad remote code execution vulnerability

CRITICO 9.8CVE-2018-14009 · GHSA-584h-jhxh-pxp2 · Published 12/07/2018 · updated 17/06/2026

Package	Affected versions	Patched versions
codiad/codiad Packagist	`≤ 2.8.4`	No fix yet
codiad codiad	`≤ 2.8.4`	No fix yet

Description

Codiad through 2.8.4 allows Remote Code Execution, a different vulnerability than CVE-2017-11366 and CVE-2017-15689.

NVD description

Codiad through 2.8.4 allows Remote Code Execution, a different vulnerability than CVE-2017-11366 and CVE-2017-15689.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.