<p>Yes, it can be exploited whether you're logged in or not.</p>
<p>You can find more info at the following links:</p>
<ul>
<li><a href="https://putyourlightson.com/articles/critical-craft-cms-security-vulnerability" rel="nofollow noreferrer">https://putyourlightson.com/articles/critical-craft-cms-security-vulnerability</a></li>
<li><a href="https://github.com/craftcms/cms/security/advisories/GHSA-4w8r-3xrw-v25g" rel="nofollow noreferrer">https://github.com/craftcms/cms/security/advisories/GHSA-4w8r-3xrw-v25g</a></li>
</ul>

CC BY-SA 4.0
2023-09-20T06:37:16.297Z
Hi Jalen, thank you so much for your answer! It really helped me out. I appreciate your time and expertise.
Magnus
CC BY-SA 4.0
2023-09-20T12:56:38.170Z
@Magnus sure thing, my pleasure 
Jalen Davenport
CC BY-SA 4.0
2023-09-20T06:08:57.993Z
2023-09-21T01:34:41.790Z
2023-09-21T01:34:41.790Z
Jalen Davenport
<p>Does anyone know if the RCE vulnerability in CVE-2023-418925 (<a href="https://github.com/craftcms/cms/security/advisories/GHSA-4w8r-3xrw-v25g" rel="nofollow noreferrer">Github link</a>) can be exploited without being logged into Craft? I have a couple of smaller sites that I'd rather not update right now.</p>

<security>
RCE in CVE-2023-418925: Can it be exploited without being logged into Craft?
# RCE in CVE-2023-418925: Can it be exploited without being logged into Craft?

(Asked by: username_0 on 2023-09-20)

Does anyone know if the RCE vulnerability in CVE-2023-418925 ([Github link](https://github.com/craftcms/cms/security/advisories/GHSA-4w8r-3xrw-v25g)) can be exploited without being logged into Craft? I have a couple of smaller sites that I'd rather not update right now.

**Tags:** security

---

## 1 answers

### Answer by username_1 on 2023-09-20. Score: 2 | Accepted answer

Yes, it can be exploited whether you're logged in or not.

You can find more info at the following links:

* <https://putyourlightson.com/articles/critical-craft-cms-security-vulnerability>
* <https://github.com/craftcms/cms/security/advisories/GHSA-4w8r-3xrw-v25g>

> **Comments:**
> **username_0**: Hi Jalen, thank you so much for your answer! It really helped me out. I appreciate your time and expertise.  
> **username_1**: @Magnus sure thing, my pleasure   

---

