Patchwire CVEs, their patch status, and feeds to follow them

CVE-2024-37843

No fix known EPSS 53%CVSS 7.5

Craft CMS up to v3.7.31 was discovered to contain a SQL injection vulnerability via the GraphQL API endpoint.

Published 2024-06-25 · CVE record · OSV

Products: craftcms craft_cms

Fixed upstream

EcosystemPackageFixed in
Packagistcraftcms/cmsno fix