ProcessWire CMS vulnerable to resource-exhaustion Denial of Service

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2025-60790 · ADVISORY
• processwire/processwire-issues · WEB
• NomanProdhan/security-vulnerability-research · WEB
• processwire/processwire · PACKAGE

processwire/processwire のその他の脆弱性

• CVE-2024-41597中 4.2Cross Site Request Forgery vulnerability in ProcessWire v.3.0.229 allows a remote attacker to insert a comment. NOTE: this is disputed by th…
• CVE-2023-24676高 7.2An issue found in ProcessWire 3.0.210 allows attackers to execute arbitrary code and install a reverse shell via the download_zip_url parame…
• CVE-2022-40488中 6.5ProcessWire v3.0.200 was discovered to contain a Cross-Site Request Forgery (CSRF).
• CVE-2022-40487中 6.1ProcessWire v3.0.200 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities via the Search Users and Search Pages fun…