https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T04:59:50.793370+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-68436 CVE-2025-68436 — Craft CMS vulnerable to potential information disclosure via unchecked asset relocation 2026-10-18T04:59:50.795135+00:00

Affected: craftcms cms

Craft is a platform for creating digital experiences. In versions 5.0.0-RC1 through 5.8.20 and 4.0.0-RC1 through 4.16.16, authenticated users on a Craft installation could potentially expose sensitive assets via their user profile photo via maliciously crafted requests. Users should update to the patched versions (5.8.21 and 4.16.17) to mitigate the issue.