CVE-2025-23209

Craft CMS

KEV
  • Vendors: Craft CMS

CVE-2025-23209 — https://github.com/craftcms/cms/security/advisories/GHSA-x684-96hh-833x ; https://nvd.nist.gov/vuln/detail/CVE-2025-23209

Related CVE by CWE

No closely related CVE found.

Risk snapshot

EPSS: n/a   |   KEV: not listed

Related CVE by CWE

No related CWE found.

Top CVE for Vendor

No items for this vendor.

Recently Exploited Similar Vulnerabilities

No recent KEV-listed items for this vendor/product.

https://github.com/craftcms/cms/security/advisories/GHSA-x684-96hh-833x ; https://nvd.nist.gov/vuln/detail/CVE-2025-23209

🧠 Explainer: What this vulnerability means

Summary: The issue in the product by Craft CMS (CWE: unspecified) may enable attacks.

Impact: Systems could be compromised, leading to confidentiality, integrity, or availability loss.

Mitigation: Upgrade immediately to the remediated release and follow vendor hardening guidance.

Craft CMS

No explicit mitigation/advisory links found in references.