Answers.Body: <p>Yes, it can be exploited whether you're logged in or not.</p>
  <p>You can find more info at the following links:</p>
  <ul>
  <li><a href="https://putyourlightson.com/articles/critical-craft-cms-security-vulnerability" rel="nofollow noreferrer">https://putyourlightson.com/articles/critical-craft-cms-security-vulnerability</a></li>
  <li><a href="https://github.com/craftcms/cms/security/advisories/GHSA-4w8r-3xrw-v25g" rel="nofollow noreferrer">https://github.com/craftcms/cms/security/advisories/GHSA-4w8r-3xrw-v25g</a></li>
  </ul>
  
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2023-09-20T06:37:16.297Z
Answers.Text: Hi Jalen, thank you so much for your answer! It really helped me out. I appreciate your time and expertise.
Answers.UserDisplayName: Magnus
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2023-09-20T12:56:38.170Z
Answers.Text: @Magnus sure thing, my pleasure 
Answers.UserDisplayName: Jalen Davenport
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2023-09-20T06:08:57.993Z
Answers.LastActivityDate: 2023-09-21T01:34:41.790Z
Answers.LastEditDate: 2023-09-21T01:34:41.790Z
Answers.UserDisplayName: Jalen Davenport
Body: <p>Does anyone know if the RCE vulnerability in CVE-2023-418925 (<a href="https://github.com/craftcms/cms/security/advisories/GHSA-4w8r-3xrw-v25g" rel="nofollow noreferrer">Github link</a>) can be exploited without being logged into Craft? I have a couple of smaller sites that I'd rather not update right now.</p>
  
Tags: <security>
Title: RCE in CVE-2023-418925: Can it be exploited without being logged into Craft?
ThreadText: # RCE in CVE-2023-418925: Can it be exploited without being logged into Craft?
  
  (Asked by: username_0 on 2023-09-20)
  
  Does anyone know if the RCE vulnerability in CVE-2023-418925 ([Github link](https://github.com/craftcms/cms/security/advisories/GHSA-4w8r-3xrw-v25g)) can be exploited without being logged into Craft? I have a couple of smaller sites that I'd rather not update right now.
  
  **Tags:** security
  
  
  ---
  
  ## 1 answers
  
  ### Answer by username_1 on 2023-09-20. Score: 2 | Accepted answer
  
  Yes, it can be exploited whether you're logged in or not.
  
  You can find more info at the following links:
  
  * <https://putyourlightson.com/articles/critical-craft-cms-security-vulnerability>
  * <https://github.com/craftcms/cms/security/advisories/GHSA-4w8r-3xrw-v25g>
  
  > **Comments:**
  > **username_0**: Hi username_1, thank you so much for your answer! It really helped me out. I appreciate your time and expertise.  
  > **username_1**: @username_0 sure thing, my pleasure   
  
  ---
  
  