Skip to content
OpenAdvisories

Package · Packagist

getkirby/panel

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 6.8
    CVE-2020-26255

    PHP Phar archives could be uploaded and executed in Kirby

    Kirby is a CMS. In Kirby CMS (getkirby/cms) before version 3.4.5, and Kirby Panel before version 2.5.14 , an editor with full access to the Kirby Panel can upload a PHP .phar file and execute it on the server. This vulnerability is critical if you might have …

    getkirby kirby getkirby/cms getkirby/panel Packagist
  • Medium 6.8
    CVE-2020-26253

    .dev domains treated as local in Kirby

    Kirby is a CMS. In Kirby CMS (getkirby/cms) before version 3.3.6, and Kirby Panel before version 2.5.14 there is a vulnerability in which the admin panel may be accessed if hosted on a .dev domain. In order to protect new installations on public servers that …

    getkirby kirby getkirby/cms getkirby/panel Packagist