CyberSecBulletin

FastCMS vulnerabilities

We track 4 vulnerabilities in FastCMS products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on April 3, 2025.

4vulnerabilities
1critical
3high
0exploited
8.5average CVSS score

Latest FastCMS vulnerabilities

  • 8.1 High severity

    A vulnerability was found in FastCMS 0.1.5.

    CVE-2025-3177FastCMS

    A vulnerability was found in FastCMS 0.1.5. It has been declared as critical. This vulnerability affects unknown code of the component JWT Handler. The manipulation leads to use of hard-coded cryptographic key . The attack can be initiated remotely. The comple

  • 7.2 High severity

    fastcms: Improper Limitation of a Pathname to a Restricted Directory

    CVE-2023-1191FastCMS

    A vulnerability classified as problematic has been found in fastcms. This affects an unknown part of the file admin/TemplateController.java of the component ZIP File Handler. The manipulation leads to path traversal. It is possible to initiate the attack remot

  • 9.8 Critical severity

    FastCMS: Unrestricted Upload of File with Dangerous Type

    CVE-2023-0651FastCMS

    A vulnerability was found in FastCMS 0.1.0. It has been classified as critical. Affected is an unknown function of the component Template Management. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has b

  • 8.8 High severity

    FastCMS: Improper Control of Generation of Code

    CVE-2022-4300FastCMS

    A vulnerability was found in FastCMS. It has been rated as critical. This issue affects some unknown processing of the file /template/edit of the component Template Handler. The manipulation leads to injection. The attack may be initiated remotely. The exploit