UpHeron
All vulnerabilities

Servers and applications

CVE-2023-36260

An issue was discovered in the Feed Me plugin 4.6.1 for Craft CMS. It allows remote attackers to cause a denial of service (DoS) via crafted strings to Feed-Me Name and Feed-Me URL fields, due to saving a feed using an Asset element type with no volume selected. NOTE: this is not a report about code provided by the Craft CMS product; it is only a report about the Feed Me plugin. NOTE: a…

Severity
High 7.5
Published
30 Jan 2024
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
4.6.1.1
Sources
NVD

Affected software

SoftwareAffected versions
Craft CMSServers and applications · cpe:a:craftcms:craft_cms
  • Every version before 4.6.1.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-36260
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-36260