Skip to contentCrafter Software Cms vulnerabilities
- crafter software cms, craftercms crafter cms +1 moreImproper Control of Dynamically-Managed Code Resources in Crafter StudioCVE-2022-40635Public exploitFix available6.4 Medium
- crafter software cms, craftercms crafter cms +1 moreImproper Control of Dynamically-Managed Code Resources in Crafter StudioCVE-2022-40634Public exploitFix available6.4 Medium
- crafter software cms, craftercms crafter cms +1 moreImproper Control of Dynamically-Managed Code Resources in Crafter StudioCVE-2021-23267Fix available7.6 High
- crafter software cms, craftercms crafter cms +1 moreImproper Output Neutralization for Logs in Crafter StudioCVE-2021-23266Fix available4.3 Medium
- crafter software cms, craftercms crafter cms +1 moreImproper Privilege Management in Crafter StudioCVE-2021-23265Fix available3.5 Low
- crafter software cms, craftercms crafter cms +1 moreTransmission of Private Resources into a New Sphere ('Resource Leak') and Exposure of Resource to Wrong Sphere in Crafter SearchCVE-2021-23264Fix available8.1 High
- crafter software cms, craftercms crafter cms +1 moreTransmission of Private Resources into a New Sphere ('Resource Leak') in Crafter EngineCVE-2021-232635.9 Medium
- crafter software cms, craftercms crafter cms +1 moreSnakeyaml deserialization vulnerability bypassCVE-2021-232624.2 Medium
- crafter software cms, craftercms crafter cms +1 moreOverriding the system configuration file causes a denial of serviceCVE-2021-232614.5 Medium
- crafter software cms, craftercms crafter cms +1 moreStored XSS Vulnerability in File Name of the File Upload functionCVE-2021-232606.5 Medium
- crafter software cms, craftercms crafter cms +1 moreGroovy Sandbox BypassCVE-2021-232594.2 Medium
- crafter software cms, craftercms crafter cms +1 moreSpring SPEL Expression Language InjectionCVE-2021-232584.2 Medium
- crafter software cms, craftercms studio +1 moreAuthenticated attackers with developer privileges in Crafter Studio may execute OS commands via deep inspection of FreeMarker template exposed objects.CVE-2020-25803Fix available4.2 Medium
- crafter software cms, craftercms studio +1 moreAuthenticated attackers with developer privileges in Crafter Studio may execute OS commands via Groovy scripting.CVE-2020-25802Fix available4.2 Medium