Executive brief
Winter CMS Local File Inclusion through Server Side Template Injection
Affected products
- Packagist winter/wn-backend-module
Junglewise Threat Intelligence
CVE-2023-52085: Winter CMS Local File Inclusion through Server Side Template Injection
CVE-2023-52085 · Severity: low · CVSS 3.1 · Published 2024-01-02
Technologies: winter/wn-backend-module (Packagist). Vendors: Packagist.
Related threats
- Winter CMS is a content management system built on the Laravel PHP framework. In versions up to and including 1.2.12, authenticated backend
- Winter CMS is a content management system built on the Laravel PHP framework. In versions up to and including 1.2.12, the backend FileUpload
- Winter CMS is a content management system built on the Laravel PHP framework. In versions up to and including 1.2.12, the backend Filter wid
- Winter CMS is a content management system built on the Laravel PHP framework. In versions prior to 1.2.13, the backend did not validate the
- Winter is a free, open-source content management system (CMS) based on the Laravel PHP framework. From 1.2.10 through 1.2.12, authenticated