Crafter Software vulnerabilities

Products

• Cms 14

Newest

• crafter software cms, craftercms crafter cms +1 more Improper Control of Dynamically-Managed Code Resources in Crafter Studio CVE-2022-40635 Public exploitFix available 6.4 MediumSeptember 13, 2022
• crafter software cms, craftercms crafter cms +1 more Improper Control of Dynamically-Managed Code Resources in Crafter Studio CVE-2022-40634 Public exploitFix available 6.4 MediumSeptember 13, 2022
• crafter software cms, craftercms crafter cms +1 more Improper Control of Dynamically-Managed Code Resources in Crafter Studio CVE-2021-23267 Fix available 7.6 HighMay 16, 2022
• crafter software cms, craftercms crafter cms +1 more Improper Output Neutralization for Logs in Crafter Studio CVE-2021-23266 Fix available 4.3 MediumMay 16, 2022
• crafter software cms, craftercms crafter cms +1 more Improper Privilege Management in Crafter Studio CVE-2021-23265 Fix available 3.5 LowMay 16, 2022
• crafter software cms, craftercms crafter cms +1 more Transmission of Private Resources into a New Sphere ('Resource Leak') and Exposure of Resource to Wrong Sphere in Crafter Search CVE-2021-23264 Fix available 8.1 HighDecember 2, 2021
• crafter software cms, craftercms crafter cms +1 more Transmission of Private Resources into a New Sphere ('Resource Leak') in Crafter Engine CVE-2021-23263 5.9 MediumDecember 2, 2021
• crafter software cms, craftercms crafter cms +1 more Snakeyaml deserialization vulnerability bypass CVE-2021-23262 4.2 MediumDecember 2, 2021
• crafter software cms, craftercms crafter cms +1 more Overriding the system configuration file causes a denial of service CVE-2021-23261 4.5 MediumDecember 2, 2021
• crafter software cms, craftercms crafter cms +1 more Stored XSS Vulnerability in File Name of the File Upload function CVE-2021-23260 6.5 MediumDecember 2, 2021
• crafter software cms, craftercms crafter cms +1 more Groovy Sandbox Bypass CVE-2021-23259 4.2 MediumDecember 2, 2021
• crafter software cms, craftercms crafter cms +1 more Spring SPEL Expression Language Injection CVE-2021-23258 4.2 MediumDecember 2, 2021
• crafter software cms, craftercms studio +1 more Authenticated attackers with developer privileges in Crafter Studio may execute OS commands via deep inspection of FreeMarker template exposed objects. CVE-2020-25803 Fix available 4.2 MediumOctober 6, 2020
• crafter software cms, craftercms studio +1 more Authenticated attackers with developer privileges in Crafter Studio may execute OS commands via Groovy scripting. CVE-2020-25802 Fix available 4.2 MediumOctober 6, 2020