Zetlyn
GitHubGet started

Masa CMS is an open source Enterprise Content Management platform. Masa CMS versions prior to 7.2.8, 7.3.13, and 7.4.6 are vulnerable to rem…

cve CVE-2024-32641 2 sources, 2 claims · Watch

NVD writes:
Masa CMS is an open source Enterprise Content Management platform. Masa CMS versions prior to 7.2.8, 7.3.13, and 7.4.6 are vulnerable to remote code execution. The vulnerability exists in the addParam function, which accepts user input via the criteria parameter. This input is subsequently evaluated by setDynamicContent, allowing an unauthenticated attacker to execute arbitrary code via the m tag. The vulnerability is patched in versions 7.2.8, 7.3.13, and 7.4.6. the claim
Severity
CRITICAL NVD
CVSS
9.8 NVD
EPSS
0.12297 EPSS
Vendor
MasaCMS NVD
Product
MasaCMS NVD
CWE
CWE-94 NVD

How far exploitation has got

  1. No public code known
  2. Proof of concept
  3. Proof of concept, verified
  4. A Metasploit module
  5. Exploited in the wild
  6. Used in ransomware campaigns

Timeline

2025-12-03first spoke of it: Masa CMS is an open source Enterprise Content Management platform. Masa CMS versions prior to 7.2.8, 7.3.13, and 7.4.6 are vulnerable to remote code execution. The vulnerability exists in the addParam function, which accepts user input via the criteria parameter. This input is subsequently evaluated by setDynamicContent, allowing an unauthenticated attacker to execute arbitrary code via the m tag. The vulnerability is patched in versions 7.2.8, 7.3.13, and 7.4.6.NVD
2026-10-05first spoke of it: CVE-2024-32641EPSS

Masa CMS is an open source Enterprise Content Management platform. Masa CMS versions prior to 7.2.8, 7.3.13, and 7.4.6 are vulnerable to remote code execution. The vulnerability exists in the addParam function, which accepts user input via the criteria parameter. This input is subsequently evaluated by setDynamicContent, allowing an unauthenticated attacker to execute arbitrary code via the m tag. The vulnerability is patched in versions 7.2.8, 7.3.13, and 7.4.6.

What it is to other things

affectsmasacms/masacms
NVD
made_bymasacms
NVD
Every value, with what each source said and its receipt
PropertySourceSaidMeans here
Automatable
automatable
NVDyes
An attacker can reliably run all of the kill chain's first four steps without a person.
receipt
Source
NVD
Its words
yes
Read by
field:cve.metrics.ssvcV203[].ssvcData.options[].automatable
Said since
2026-10-06 11:54 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
2026-10-06 11:54 UTCyes
2026-09-29 09:45 UTC—
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "MasaCMS",
            "vendor": "MasaCMS",
            "versions": [
              {
                "status": "affected",
                "version": ">= 7.4.0, < 7.4.6"
              },
              {
                "status": "affected",
                "version": ">= 7.3.0, < 7.3.13"
              },
              {
                "status": "affected",
                "version": "< 7.2.8"
              }
            ]
          }
        ],
        "source": "security-advisories@github.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:masacms:masacms:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "82A74C33-3407-498A-9444-4A451E5968FE",
                "versionEndExcluding": "7.2.8",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:masacms:masacms:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "45C4FA2D-DCEF-4991-B21D-C2BAC3A9DF5C",
                "versionEndExcluding": "7.3.13",
                "versionStartIncluding": "7.3",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:masacms:masacms:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "ED61DA62-94D4-4081-923F-2674CFC7945A",
                "versionEndExcluding": "7.4.6",
                "versionStartIncluding": "7.4.0",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Masa CMS is an open source Enterprise Content Management platform. Masa CMS versions prior to 7.2.8, 7.3.13, and 7.4.6 are vulnerable to remote code execution. The vulnerability exists in the addParam function, which accepts user input via the criteria parameter. This input is subsequently evaluated by setDynamicContent, allowing an unauthenticated attacker to execute arbitrary code via the m tag. The vulnerability is patched in versions 7.2.8, 7.3.13, and 7.4.6."
      },
      {
        "lang": "es",
        "value": "Masa CMS es una plataforma de gestión de contenido empresarial de código abierto. Versiones anteriores a Masa CMS 7.2.8, 7.3.13 y 7.4.6 son vulnerables a ejecución remota de código. La vulnerabilidad existe en la función addParam, que acepta la entrada del usuario a través del parámetro criteria. Esta entrada es posteriormente evaluada por setDynamicContent, permitiendo a un atacante no autenticado ejecutar código arbitrario a través de la etiqueta m. La vulnerabilidad está parcheada en las versiones 7.2.8, 7.3.13 y 7.4.6."
      }
    ],
    "id": "CVE-2024-32641",
    "lastModified": "2026-09-26T21:10:00.130",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 5.9,
          "source": "security-advisories@github.com",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2024-32641",
            "options": [
              {
                "exploitation": "poc"
              },
              {
                "automatable": "yes"
              },
              {
                "technicalImpact": "total"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2025-12-03T16:31:34.466457Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2025-12-03T17:15:48.220",
    "references": [
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Patch"
        ],
        "url": "https://github.com/MasaCMS/MasaCMS/commit/fb27f822fe426496af71205fa35208e58823fcf6"
      },
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Exploit",
          "Vendor Advisory"
        ],
        "url": "https://github.com/MasaCMS/MasaCMS/security/advisories/GHSA-cj9g-v5mq-qrjm"
      }
    ],
    "sourceIdentifier": "security-advisories@github.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-94"
          }
        ],
        "source": "security-advisories@github.com",
        "type": "Secondary"
      }
    ]
  }
}
—
CVSS
cvss
NVD9.8
receipt
Source
NVD
Its words
9.8
Read by
field:cve.metrics.cvssMetricV31[type=Primary].cvssData.baseScore || field:cve.metrics.cvssMetricV31[].cvssData.baseScore
Said since
2026-09-29 09:45 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "MasaCMS",
            "vendor": "MasaCMS",
            "versions": [
              {
                "status": "affected",
                "version": ">= 7.4.0, < 7.4.6"
              },
              {
                "status": "affected",
                "version": ">= 7.3.0, < 7.3.13"
              },
              {
                "status": "affected",
                "version": "< 7.2.8"
              }
            ]
          }
        ],
        "source": "security-advisories@github.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:masacms:masacms:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "82A74C33-3407-498A-9444-4A451E5968FE",
                "versionEndExcluding": "7.2.8",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:masacms:masacms:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "45C4FA2D-DCEF-4991-B21D-C2BAC3A9DF5C",
                "versionEndExcluding": "7.3.13",
                "versionStartIncluding": "7.3",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:masacms:masacms:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "ED61DA62-94D4-4081-923F-2674CFC7945A",
                "versionEndExcluding": "7.4.6",
                "versionStartIncluding": "7.4.0",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Masa CMS is an open source Enterprise Content Management platform. Masa CMS versions prior to 7.2.8, 7.3.13, and 7.4.6 are vulnerable to remote code execution. The vulnerability exists in the addParam function, which accepts user input via the criteria parameter. This input is subsequently evaluated by setDynamicContent, allowing an unauthenticated attacker to execute arbitrary code via the m tag. The vulnerability is patched in versions 7.2.8, 7.3.13, and 7.4.6."
      },
      {
        "lang": "es",
        "value": "Masa CMS es una plataforma de gestión de contenido empresarial de código abierto. Versiones anteriores a Masa CMS 7.2.8, 7.3.13 y 7.4.6 son vulnerables a ejecución remota de código. La vulnerabilidad existe en la función addParam, que acepta la entrada del usuario a través del parámetro criteria. Esta entrada es posteriormente evaluada por setDynamicContent, permitiendo a un atacante no autenticado ejecutar código arbitrario a través de la etiqueta m. La vulnerabilidad está parcheada en las versiones 7.2.8, 7.3.13 y 7.4.6."
      }
    ],
    "id": "CVE-2024-32641",
    "lastModified": "2026-09-26T21:10:00.130",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 5.9,
          "source": "security-advisories@github.com",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2024-32641",
            "options": [
              {
                "exploitation": "poc"
              },
              {
                "automatable": "yes"
              },
              {
                "technicalImpact": "total"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2025-12-03T16:31:34.466457Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2025-12-03T17:15:48.220",
    "references": [
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Patch"
        ],
        "url": "https://github.com/MasaCMS/MasaCMS/commit/fb27f822fe426496af71205fa35208e58823fcf6"
      },
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Exploit",
          "Vendor Advisory"
        ],
        "url": "https://github.com/MasaCMS/MasaCMS/security/advisories/GHSA-cj9g-v5mq-qrjm"
      }
    ],
    "sourceIdentifier": "security-advisories@github.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-94"
          }
        ],
        "source": "security-advisories@github.com",
        "type": "Secondary"
      }
    ]
  }
}
—
CVSS vector
cvss_vector
NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
receipt
Source
NVD
Its words
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Read by
field:cve.metrics.cvssMetricV31[type=Primary].cvssData.vectorString || field:cve.metrics.cvssMetricV31[].cvssData.vectorString
Said since
2026-10-06 11:54 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
2026-10-06 11:54 UTCCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
2026-09-29 09:45 UTC—
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "MasaCMS",
            "vendor": "MasaCMS",
            "versions": [
              {
                "status": "affected",
                "version": ">= 7.4.0, < 7.4.6"
              },
              {
                "status": "affected",
                "version": ">= 7.3.0, < 7.3.13"
              },
              {
                "status": "affected",
                "version": "< 7.2.8"
              }
            ]
          }
        ],
        "source": "security-advisories@github.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:masacms:masacms:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "82A74C33-3407-498A-9444-4A451E5968FE",
                "versionEndExcluding": "7.2.8",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:masacms:masacms:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "45C4FA2D-DCEF-4991-B21D-C2BAC3A9DF5C",
                "versionEndExcluding": "7.3.13",
                "versionStartIncluding": "7.3",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:masacms:masacms:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "ED61DA62-94D4-4081-923F-2674CFC7945A",
                "versionEndExcluding": "7.4.6",
                "versionStartIncluding": "7.4.0",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Masa CMS is an open source Enterprise Content Management platform. Masa CMS versions prior to 7.2.8, 7.3.13, and 7.4.6 are vulnerable to remote code execution. The vulnerability exists in the addParam function, which accepts user input via the criteria parameter. This input is subsequently evaluated by setDynamicContent, allowing an unauthenticated attacker to execute arbitrary code via the m tag. The vulnerability is patched in versions 7.2.8, 7.3.13, and 7.4.6."
      },
      {
        "lang": "es",
        "value": "Masa CMS es una plataforma de gestión de contenido empresarial de código abierto. Versiones anteriores a Masa CMS 7.2.8, 7.3.13 y 7.4.6 son vulnerables a ejecución remota de código. La vulnerabilidad existe en la función addParam, que acepta la entrada del usuario a través del parámetro criteria. Esta entrada es posteriormente evaluada por setDynamicContent, permitiendo a un atacante no autenticado ejecutar código arbitrario a través de la etiqueta m. La vulnerabilidad está parcheada en las versiones 7.2.8, 7.3.13 y 7.4.6."
      }
    ],
    "id": "CVE-2024-32641",
    "lastModified": "2026-09-26T21:10:00.130",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 5.9,
          "source": "security-advisories@github.com",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2024-32641",
            "options": [
              {
                "exploitation": "poc"
              },
              {
                "automatable": "yes"
              },
              {
                "technicalImpact": "total"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2025-12-03T16:31:34.466457Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2025-12-03T17:15:48.220",
    "references": [
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Patch"
        ],
        "url": "https://github.com/MasaCMS/MasaCMS/commit/fb27f822fe426496af71205fa35208e58823fcf6"
      },
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Exploit",
          "Vendor Advisory"
        ],
        "url": "https://github.com/MasaCMS/MasaCMS/security/advisories/GHSA-cj9g-v5mq-qrjm"
      }
    ],
    "sourceIdentifier": "security-advisories@github.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-94"
          }
        ],
        "source": "security-advisories@github.com",
        "type": "Secondary"
      }
    ]
  }
}
—
CWE
cwe
NVDCWE-94
receipt
Source
NVD
Its words
CWE-94
Read by
field:cve.weaknesses[].description[].value
Said since
2026-10-06 11:54 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
2026-10-06 11:54 UTCCWE-94
2026-09-29 09:45 UTC—
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "MasaCMS",
            "vendor": "MasaCMS",
            "versions": [
              {
                "status": "affected",
                "version": ">= 7.4.0, < 7.4.6"
              },
              {
                "status": "affected",
                "version": ">= 7.3.0, < 7.3.13"
              },
              {
                "status": "affected",
                "version": "< 7.2.8"
              }
            ]
          }
        ],
        "source": "security-advisories@github.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:masacms:masacms:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "82A74C33-3407-498A-9444-4A451E5968FE",
                "versionEndExcluding": "7.2.8",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:masacms:masacms:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "45C4FA2D-DCEF-4991-B21D-C2BAC3A9DF5C",
                "versionEndExcluding": "7.3.13",
                "versionStartIncluding": "7.3",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:masacms:masacms:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "ED61DA62-94D4-4081-923F-2674CFC7945A",
                "versionEndExcluding": "7.4.6",
                "versionStartIncluding": "7.4.0",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Masa CMS is an open source Enterprise Content Management platform. Masa CMS versions prior to 7.2.8, 7.3.13, and 7.4.6 are vulnerable to remote code execution. The vulnerability exists in the addParam function, which accepts user input via the criteria parameter. This input is subsequently evaluated by setDynamicContent, allowing an unauthenticated attacker to execute arbitrary code via the m tag. The vulnerability is patched in versions 7.2.8, 7.3.13, and 7.4.6."
      },
      {
        "lang": "es",
        "value": "Masa CMS es una plataforma de gestión de contenido empresarial de código abierto. Versiones anteriores a Masa CMS 7.2.8, 7.3.13 y 7.4.6 son vulnerables a ejecución remota de código. La vulnerabilidad existe en la función addParam, que acepta la entrada del usuario a través del parámetro criteria. Esta entrada es posteriormente evaluada por setDynamicContent, permitiendo a un atacante no autenticado ejecutar código arbitrario a través de la etiqueta m. La vulnerabilidad está parcheada en las versiones 7.2.8, 7.3.13 y 7.4.6."
      }
    ],
    "id": "CVE-2024-32641",
    "lastModified": "2026-09-26T21:10:00.130",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 5.9,
          "source": "security-advisories@github.com",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2024-32641",
            "options": [
              {
                "exploitation": "poc"
              },
              {
                "automatable": "yes"
              },
              {
                "technicalImpact": "total"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2025-12-03T16:31:34.466457Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2025-12-03T17:15:48.220",
    "references": [
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Patch"
        ],
        "url": "https://github.com/MasaCMS/MasaCMS/commit/fb27f822fe426496af71205fa35208e58823fcf6"
      },
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Exploit",
          "Vendor Advisory"
        ],
        "url": "https://github.com/MasaCMS/MasaCMS/security/advisories/GHSA-cj9g-v5mq-qrjm"
      }
    ],
    "sourceIdentifier": "security-advisories@github.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-94"
          }
        ],
        "source": "security-advisories@github.com",
        "type": "Secondary"
      }
    ]
  }
}
—
EPSS
epss
EPSS0.12297
receipt
Source
EPSS
Its words
0.122970000
Read by
field:epss
Said since
2026-10-06 12:18 UTC
Last answered
2026-10-06 12:19 UTC
Original
open at the source
What the source handed over
{
  "cve": "CVE-2024-32641",
  "date": "2026-10-05",
  "epss": "0.122970000",
  "percentile": "0.960770000"
}
—
EPSS percentile
epss_percentile
EPSS0.96077
receipt
Source
EPSS
Its words
0.960770000
Read by
field:percentile
Said since
2026-10-06 12:18 UTC
Last answered
2026-10-06 12:19 UTC
Original
open at the source
What the source handed over
{
  "cve": "CVE-2024-32641",
  "date": "2026-10-05",
  "epss": "0.122970000",
  "percentile": "0.960770000"
}
—
Exploitation
exploitation
NVDpoc
A public proof of concept exists, or exploitation is trivial.
receipt
Source
NVD
Its words
poc
Read by
field:cve.metrics.ssvcV203[].ssvcData.options[].exploitation
Said since
2026-10-06 11:54 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
2026-10-06 11:54 UTCpoc
2026-09-29 09:45 UTC—
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "MasaCMS",
            "vendor": "MasaCMS",
            "versions": [
              {
                "status": "affected",
                "version": ">= 7.4.0, < 7.4.6"
              },
              {
                "status": "affected",
                "version": ">= 7.3.0, < 7.3.13"
              },
              {
                "status": "affected",
                "version": "< 7.2.8"
              }
            ]
          }
        ],
        "source": "security-advisories@github.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:masacms:masacms:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "82A74C33-3407-498A-9444-4A451E5968FE",
                "versionEndExcluding": "7.2.8",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:masacms:masacms:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "45C4FA2D-DCEF-4991-B21D-C2BAC3A9DF5C",
                "versionEndExcluding": "7.3.13",
                "versionStartIncluding": "7.3",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:masacms:masacms:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "ED61DA62-94D4-4081-923F-2674CFC7945A",
                "versionEndExcluding": "7.4.6",
                "versionStartIncluding": "7.4.0",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Masa CMS is an open source Enterprise Content Management platform. Masa CMS versions prior to 7.2.8, 7.3.13, and 7.4.6 are vulnerable to remote code execution. The vulnerability exists in the addParam function, which accepts user input via the criteria parameter. This input is subsequently evaluated by setDynamicContent, allowing an unauthenticated attacker to execute arbitrary code via the m tag. The vulnerability is patched in versions 7.2.8, 7.3.13, and 7.4.6."
      },
      {
        "lang": "es",
        "value": "Masa CMS es una plataforma de gestión de contenido empresarial de código abierto. Versiones anteriores a Masa CMS 7.2.8, 7.3.13 y 7.4.6 son vulnerables a ejecución remota de código. La vulnerabilidad existe en la función addParam, que acepta la entrada del usuario a través del parámetro criteria. Esta entrada es posteriormente evaluada por setDynamicContent, permitiendo a un atacante no autenticado ejecutar código arbitrario a través de la etiqueta m. La vulnerabilidad está parcheada en las versiones 7.2.8, 7.3.13 y 7.4.6."
      }
    ],
    "id": "CVE-2024-32641",
    "lastModified": "2026-09-26T21:10:00.130",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 5.9,
          "source": "security-advisories@github.com",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2024-32641",
            "options": [
              {
                "exploitation": "poc"
              },
              {
                "automatable": "yes"
              },
              {
                "technicalImpact": "total"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2025-12-03T16:31:34.466457Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2025-12-03T17:15:48.220",
    "references": [
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Patch"
        ],
        "url": "https://github.com/MasaCMS/MasaCMS/commit/fb27f822fe426496af71205fa35208e58823fcf6"
      },
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Exploit",
          "Vendor Advisory"
        ],
        "url": "https://github.com/MasaCMS/MasaCMS/security/advisories/GHSA-cj9g-v5mq-qrjm"
      }
    ],
    "sourceIdentifier": "security-advisories@github.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-94"
          }
        ],
        "source": "security-advisories@github.com",
        "type": "Secondary"
      }
    ]
  }
}
—
Product
product
NVDMasaCMS
receipt
Source
NVD
Its words
MasaCMS
Read by
field:cve.affected[].affectedData[].product
Said since
2026-09-29 17:49 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
2026-09-29 17:49 UTCMasaCMS
2026-09-29 09:45 UTC—
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "MasaCMS",
            "vendor": "MasaCMS",
            "versions": [
              {
                "status": "affected",
                "version": ">= 7.4.0, < 7.4.6"
              },
              {
                "status": "affected",
                "version": ">= 7.3.0, < 7.3.13"
              },
              {
                "status": "affected",
                "version": "< 7.2.8"
              }
            ]
          }
        ],
        "source": "security-advisories@github.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:masacms:masacms:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "82A74C33-3407-498A-9444-4A451E5968FE",
                "versionEndExcluding": "7.2.8",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:masacms:masacms:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "45C4FA2D-DCEF-4991-B21D-C2BAC3A9DF5C",
                "versionEndExcluding": "7.3.13",
                "versionStartIncluding": "7.3",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:masacms:masacms:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "ED61DA62-94D4-4081-923F-2674CFC7945A",
                "versionEndExcluding": "7.4.6",
                "versionStartIncluding": "7.4.0",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Masa CMS is an open source Enterprise Content Management platform. Masa CMS versions prior to 7.2.8, 7.3.13, and 7.4.6 are vulnerable to remote code execution. The vulnerability exists in the addParam function, which accepts user input via the criteria parameter. This input is subsequently evaluated by setDynamicContent, allowing an unauthenticated attacker to execute arbitrary code via the m tag. The vulnerability is patched in versions 7.2.8, 7.3.13, and 7.4.6."
      },
      {
        "lang": "es",
        "value": "Masa CMS es una plataforma de gestión de contenido empresarial de código abierto. Versiones anteriores a Masa CMS 7.2.8, 7.3.13 y 7.4.6 son vulnerables a ejecución remota de código. La vulnerabilidad existe en la función addParam, que acepta la entrada del usuario a través del parámetro criteria. Esta entrada es posteriormente evaluada por setDynamicContent, permitiendo a un atacante no autenticado ejecutar código arbitrario a través de la etiqueta m. La vulnerabilidad está parcheada en las versiones 7.2.8, 7.3.13 y 7.4.6."
      }
    ],
    "id": "CVE-2024-32641",
    "lastModified": "2026-09-26T21:10:00.130",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 5.9,
          "source": "security-advisories@github.com",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2024-32641",
            "options": [
              {
                "exploitation": "poc"
              },
              {
                "automatable": "yes"
              },
              {
                "technicalImpact": "total"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2025-12-03T16:31:34.466457Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2025-12-03T17:15:48.220",
    "references": [
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Patch"
        ],
        "url": "https://github.com/MasaCMS/MasaCMS/commit/fb27f822fe426496af71205fa35208e58823fcf6"
      },
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Exploit",
          "Vendor Advisory"
        ],
        "url": "https://github.com/MasaCMS/MasaCMS/security/advisories/GHSA-cj9g-v5mq-qrjm"
      }
    ],
    "sourceIdentifier": "security-advisories@github.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-94"
          }
        ],
        "source": "security-advisories@github.com",
        "type": "Secondary"
      }
    ]
  }
}
—
Severity
severity
NVDCRITICAL
From the CVSS base score at 9.0 and above.
receipt
Source
NVD
Its words
CRITICAL
Read by
field:cve.metrics.cvssMetricV31[type=Primary].cvssData.baseSeverity || field:cve.metrics.cvssMetricV31[].cvssData.baseSeverity
Said since
2026-10-06 11:54 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
2026-10-06 11:54 UTCCRITICAL
2026-09-29 09:45 UTC—
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "MasaCMS",
            "vendor": "MasaCMS",
            "versions": [
              {
                "status": "affected",
                "version": ">= 7.4.0, < 7.4.6"
              },
              {
                "status": "affected",
                "version": ">= 7.3.0, < 7.3.13"
              },
              {
                "status": "affected",
                "version": "< 7.2.8"
              }
            ]
          }
        ],
        "source": "security-advisories@github.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:masacms:masacms:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "82A74C33-3407-498A-9444-4A451E5968FE",
                "versionEndExcluding": "7.2.8",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:masacms:masacms:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "45C4FA2D-DCEF-4991-B21D-C2BAC3A9DF5C",
                "versionEndExcluding": "7.3.13",
                "versionStartIncluding": "7.3",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:masacms:masacms:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "ED61DA62-94D4-4081-923F-2674CFC7945A",
                "versionEndExcluding": "7.4.6",
                "versionStartIncluding": "7.4.0",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Masa CMS is an open source Enterprise Content Management platform. Masa CMS versions prior to 7.2.8, 7.3.13, and 7.4.6 are vulnerable to remote code execution. The vulnerability exists in the addParam function, which accepts user input via the criteria parameter. This input is subsequently evaluated by setDynamicContent, allowing an unauthenticated attacker to execute arbitrary code via the m tag. The vulnerability is patched in versions 7.2.8, 7.3.13, and 7.4.6."
      },
      {
        "lang": "es",
        "value": "Masa CMS es una plataforma de gestión de contenido empresarial de código abierto. Versiones anteriores a Masa CMS 7.2.8, 7.3.13 y 7.4.6 son vulnerables a ejecución remota de código. La vulnerabilidad existe en la función addParam, que acepta la entrada del usuario a través del parámetro criteria. Esta entrada es posteriormente evaluada por setDynamicContent, permitiendo a un atacante no autenticado ejecutar código arbitrario a través de la etiqueta m. La vulnerabilidad está parcheada en las versiones 7.2.8, 7.3.13 y 7.4.6."
      }
    ],
    "id": "CVE-2024-32641",
    "lastModified": "2026-09-26T21:10:00.130",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 5.9,
          "source": "security-advisories@github.com",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2024-32641",
            "options": [
              {
                "exploitation": "poc"
              },
              {
                "automatable": "yes"
              },
              {
                "technicalImpact": "total"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2025-12-03T16:31:34.466457Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2025-12-03T17:15:48.220",
    "references": [
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Patch"
        ],
        "url": "https://github.com/MasaCMS/MasaCMS/commit/fb27f822fe426496af71205fa35208e58823fcf6"
      },
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Exploit",
          "Vendor Advisory"
        ],
        "url": "https://github.com/MasaCMS/MasaCMS/security/advisories/GHSA-cj9g-v5mq-qrjm"
      }
    ],
    "sourceIdentifier": "security-advisories@github.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-94"
          }
        ],
        "source": "security-advisories@github.com",
        "type": "Secondary"
      }
    ]
  }
}
critical
Status
status
NVDAnalyzed
receipt
Source
NVD
Its words
Analyzed
Read by
field:cve.vulnStatus
Said since
2026-09-29 09:45 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "MasaCMS",
            "vendor": "MasaCMS",
            "versions": [
              {
                "status": "affected",
                "version": ">= 7.4.0, < 7.4.6"
              },
              {
                "status": "affected",
                "version": ">= 7.3.0, < 7.3.13"
              },
              {
                "status": "affected",
                "version": "< 7.2.8"
              }
            ]
          }
        ],
        "source": "security-advisories@github.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:masacms:masacms:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "82A74C33-3407-498A-9444-4A451E5968FE",
                "versionEndExcluding": "7.2.8",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:masacms:masacms:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "45C4FA2D-DCEF-4991-B21D-C2BAC3A9DF5C",
                "versionEndExcluding": "7.3.13",
                "versionStartIncluding": "7.3",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:masacms:masacms:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "ED61DA62-94D4-4081-923F-2674CFC7945A",
                "versionEndExcluding": "7.4.6",
                "versionStartIncluding": "7.4.0",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Masa CMS is an open source Enterprise Content Management platform. Masa CMS versions prior to 7.2.8, 7.3.13, and 7.4.6 are vulnerable to remote code execution. The vulnerability exists in the addParam function, which accepts user input via the criteria parameter. This input is subsequently evaluated by setDynamicContent, allowing an unauthenticated attacker to execute arbitrary code via the m tag. The vulnerability is patched in versions 7.2.8, 7.3.13, and 7.4.6."
      },
      {
        "lang": "es",
        "value": "Masa CMS es una plataforma de gestión de contenido empresarial de código abierto. Versiones anteriores a Masa CMS 7.2.8, 7.3.13 y 7.4.6 son vulnerables a ejecución remota de código. La vulnerabilidad existe en la función addParam, que acepta la entrada del usuario a través del parámetro criteria. Esta entrada es posteriormente evaluada por setDynamicContent, permitiendo a un atacante no autenticado ejecutar código arbitrario a través de la etiqueta m. La vulnerabilidad está parcheada en las versiones 7.2.8, 7.3.13 y 7.4.6."
      }
    ],
    "id": "CVE-2024-32641",
    "lastModified": "2026-09-26T21:10:00.130",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 5.9,
          "source": "security-advisories@github.com",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2024-32641",
            "options": [
              {
                "exploitation": "poc"
              },
              {
                "automatable": "yes"
              },
              {
                "technicalImpact": "total"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2025-12-03T16:31:34.466457Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2025-12-03T17:15:48.220",
    "references": [
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Patch"
        ],
        "url": "https://github.com/MasaCMS/MasaCMS/commit/fb27f822fe426496af71205fa35208e58823fcf6"
      },
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Exploit",
          "Vendor Advisory"
        ],
        "url": "https://github.com/MasaCMS/MasaCMS/security/advisories/GHSA-cj9g-v5mq-qrjm"
      }
    ],
    "sourceIdentifier": "security-advisories@github.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-94"
          }
        ],
        "source": "security-advisories@github.com",
        "type": "Secondary"
      }
    ]
  }
}
—
Technical impact
technical_impact
NVDtotal
The attacker gains full control of the component, or all of its information.
receipt
Source
NVD
Its words
total
Read by
field:cve.metrics.ssvcV203[].ssvcData.options[].technicalImpact
Said since
2026-10-06 11:54 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
2026-10-06 11:54 UTCtotal
2026-09-29 09:45 UTC—
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "MasaCMS",
            "vendor": "MasaCMS",
            "versions": [
              {
                "status": "affected",
                "version": ">= 7.4.0, < 7.4.6"
              },
              {
                "status": "affected",
                "version": ">= 7.3.0, < 7.3.13"
              },
              {
                "status": "affected",
                "version": "< 7.2.8"
              }
            ]
          }
        ],
        "source": "security-advisories@github.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:masacms:masacms:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "82A74C33-3407-498A-9444-4A451E5968FE",
                "versionEndExcluding": "7.2.8",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:masacms:masacms:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "45C4FA2D-DCEF-4991-B21D-C2BAC3A9DF5C",
                "versionEndExcluding": "7.3.13",
                "versionStartIncluding": "7.3",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:masacms:masacms:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "ED61DA62-94D4-4081-923F-2674CFC7945A",
                "versionEndExcluding": "7.4.6",
                "versionStartIncluding": "7.4.0",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Masa CMS is an open source Enterprise Content Management platform. Masa CMS versions prior to 7.2.8, 7.3.13, and 7.4.6 are vulnerable to remote code execution. The vulnerability exists in the addParam function, which accepts user input via the criteria parameter. This input is subsequently evaluated by setDynamicContent, allowing an unauthenticated attacker to execute arbitrary code via the m tag. The vulnerability is patched in versions 7.2.8, 7.3.13, and 7.4.6."
      },
      {
        "lang": "es",
        "value": "Masa CMS es una plataforma de gestión de contenido empresarial de código abierto. Versiones anteriores a Masa CMS 7.2.8, 7.3.13 y 7.4.6 son vulnerables a ejecución remota de código. La vulnerabilidad existe en la función addParam, que acepta la entrada del usuario a través del parámetro criteria. Esta entrada es posteriormente evaluada por setDynamicContent, permitiendo a un atacante no autenticado ejecutar código arbitrario a través de la etiqueta m. La vulnerabilidad está parcheada en las versiones 7.2.8, 7.3.13 y 7.4.6."
      }
    ],
    "id": "CVE-2024-32641",
    "lastModified": "2026-09-26T21:10:00.130",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 5.9,
          "source": "security-advisories@github.com",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2024-32641",
            "options": [
              {
                "exploitation": "poc"
              },
              {
                "automatable": "yes"
              },
              {
                "technicalImpact": "total"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2025-12-03T16:31:34.466457Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2025-12-03T17:15:48.220",
    "references": [
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Patch"
        ],
        "url": "https://github.com/MasaCMS/MasaCMS/commit/fb27f822fe426496af71205fa35208e58823fcf6"
      },
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Exploit",
          "Vendor Advisory"
        ],
        "url": "https://github.com/MasaCMS/MasaCMS/security/advisories/GHSA-cj9g-v5mq-qrjm"
      }
    ],
    "sourceIdentifier": "security-advisories@github.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-94"
          }
        ],
        "source": "security-advisories@github.com",
        "type": "Secondary"
      }
    ]
  }
}
—
Vendor
vendor
NVDMasaCMS
receipt
Source
NVD
Its words
MasaCMS
Read by
field:cve.affected[].affectedData[].vendor
Said since
2026-09-29 17:49 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
2026-09-29 17:49 UTCMasaCMS
2026-09-29 09:45 UTC—
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "MasaCMS",
            "vendor": "MasaCMS",
            "versions": [
              {
                "status": "affected",
                "version": ">= 7.4.0, < 7.4.6"
              },
              {
                "status": "affected",
                "version": ">= 7.3.0, < 7.3.13"
              },
              {
                "status": "affected",
                "version": "< 7.2.8"
              }
            ]
          }
        ],
        "source": "security-advisories@github.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:masacms:masacms:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "82A74C33-3407-498A-9444-4A451E5968FE",
                "versionEndExcluding": "7.2.8",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:masacms:masacms:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "45C4FA2D-DCEF-4991-B21D-C2BAC3A9DF5C",
                "versionEndExcluding": "7.3.13",
                "versionStartIncluding": "7.3",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:masacms:masacms:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "ED61DA62-94D4-4081-923F-2674CFC7945A",
                "versionEndExcluding": "7.4.6",
                "versionStartIncluding": "7.4.0",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Masa CMS is an open source Enterprise Content Management platform. Masa CMS versions prior to 7.2.8, 7.3.13, and 7.4.6 are vulnerable to remote code execution. The vulnerability exists in the addParam function, which accepts user input via the criteria parameter. This input is subsequently evaluated by setDynamicContent, allowing an unauthenticated attacker to execute arbitrary code via the m tag. The vulnerability is patched in versions 7.2.8, 7.3.13, and 7.4.6."
      },
      {
        "lang": "es",
        "value": "Masa CMS es una plataforma de gestión de contenido empresarial de código abierto. Versiones anteriores a Masa CMS 7.2.8, 7.3.13 y 7.4.6 son vulnerables a ejecución remota de código. La vulnerabilidad existe en la función addParam, que acepta la entrada del usuario a través del parámetro criteria. Esta entrada es posteriormente evaluada por setDynamicContent, permitiendo a un atacante no autenticado ejecutar código arbitrario a través de la etiqueta m. La vulnerabilidad está parcheada en las versiones 7.2.8, 7.3.13 y 7.4.6."
      }
    ],
    "id": "CVE-2024-32641",
    "lastModified": "2026-09-26T21:10:00.130",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 5.9,
          "source": "security-advisories@github.com",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2024-32641",
            "options": [
              {
                "exploitation": "poc"
              },
              {
                "automatable": "yes"
              },
              {
                "technicalImpact": "total"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2025-12-03T16:31:34.466457Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2025-12-03T17:15:48.220",
    "references": [
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Patch"
        ],
        "url": "https://github.com/MasaCMS/MasaCMS/commit/fb27f822fe426496af71205fa35208e58823fcf6"
      },
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Exploit",
          "Vendor Advisory"
        ],
        "url": "https://github.com/MasaCMS/MasaCMS/security/advisories/GHSA-cj9g-v5mq-qrjm"
      }
    ],
    "sourceIdentifier": "security-advisories@github.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-94"
          }
        ],
        "source": "security-advisories@github.com",
        "type": "Secondary"
      }
    ]
  }
}
—
Every claim, by kind

vulnerability

Masa CMS is an open source Enterprise Content Management platform. Masa CMS versions prior to 7.2.8, 7.3.13, and 7.4.6 are vulnerable to remote code execution. The vulnerability exists in the addParam function, which accepts user input via the criteria parameter. This input is subsequently evaluated by setDynamicContent, allowing an unauthenticated attacker to execute arbitrary code via the m tag. The vulnerability is patched in versions 7.2.8, 7.3.13, and 7.4.6.
zetlyn/cve-nvd · 2025-12-03
automatable yes cvss 9.8 cvss_vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H cwe CWE-94 exploitation poc product MasaCMS severity CRITICAL status Analyzed technical_impact total vendor MasaCMS source
CVE-2024-32641
zetlyn/cve-epss · 2026-10-05
epss 0.12297 epss_percentile 0.96077 source