Raytha CMS Code Injection Vulnerability in 'Functions' Module
Vulnerability
A code injection vulnerability has been identified in the 'Functions' module of Raytha CMS, affecting all versions prior to 1.4.6. This vulnerability allows privileged users to execute custom JavaScript code that can instantiate .NET components and perform arbitrary operations within the application's hosting environment. The issue arises from a lack of sandboxing or access restrictions on the code executed through the 'Functions' feature.
Impact
Exploitation of this vulnerability could lead to unauthorized access and manipulation of the application's hosting environment by executing arbitrary .NET code.
Remediation
Users can upgrade to Raytha CMS version 1.4.6 or later to address this vulnerability.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.