REDAXO CMS is vulnerable to RCE attack through its template management component

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2025-64050 · ADVISORY
• redaxo/redaxo#6372 · WEB
• drive.google.com/drive/folders/1Via4r4wn5zCcBllWmHpxYweCPgcbN0bz · WEB
• redaxo/redaxo · PACKAGE
• vettrivel007/CVE-Disclosures · WEB

redaxo/source のその他の脆弱性

• CVE-2026-117538中 4.1REDAXO before 5.21.0 contains a reflected cross-site scripting vulnerability in the backend packages API, where the function parameter is co…
• CVE-2026-117537中 4.1REDAXO before 5.21.0 contains a reflected cross-site scripting vulnerability that allows authenticated attackers to inject scripts via the t…
• CVE-2026-63002中 4.8REDAXO is a PHP-based content management system. Prior to 5.21.2, redaxo/src/addons/mediapool/pages/sync.php inserts filenames held in $diff…
• CVE-2026-63001中 4.8REDAXO is a PHP-based content management system. Prior to 5.21.2, the mediaIsInUse() handler in redaxo/src/addons/media_manager/lib/media_ma…
• CVE-2026-63000中 6.4REDAXO is a PHP-based content management system. Prior to 5.21.2, rex_api_install_package_update in redaxo/src/addons/install/lib/api/api_pa…