Craftercms Crafter Cms vulnerabilities

• craftercms, craftercms crafter cms +1 more Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in Crafter Studio CVE-2023-26020 5.7 MediumFebruary 17, 2023
• crafter software cms, craftercms crafter cms +1 more Improper Control of Dynamically-Managed Code Resources in Crafter Studio CVE-2022-40635 Public exploitFix available 6.4 MediumSeptember 13, 2022
• crafter software cms, craftercms crafter cms +1 more Improper Control of Dynamically-Managed Code Resources in Crafter Studio CVE-2022-40634 Public exploitFix available 6.4 MediumSeptember 13, 2022
• crafter software cms, craftercms crafter cms +1 more Improper Control of Dynamically-Managed Code Resources in Crafter Studio CVE-2021-23267 Fix available 7.6 HighMay 16, 2022
• crafter software cms, craftercms crafter cms +1 more Improper Output Neutralization for Logs in Crafter Studio CVE-2021-23266 Fix available 4.3 MediumMay 16, 2022
• crafter software cms, craftercms crafter cms +1 more Improper Privilege Management in Crafter Studio CVE-2021-23265 Fix available 3.5 LowMay 16, 2022
• crafter software cms, craftercms crafter cms +1 more Transmission of Private Resources into a New Sphere ('Resource Leak') and Exposure of Resource to Wrong Sphere in Crafter Search CVE-2021-23264 Fix available 8.1 HighDecember 2, 2021
• crafter software cms, craftercms crafter cms +1 more Transmission of Private Resources into a New Sphere ('Resource Leak') in Crafter Engine CVE-2021-23263 5.9 MediumDecember 2, 2021
• crafter software cms, craftercms crafter cms +1 more Snakeyaml deserialization vulnerability bypass CVE-2021-23262 4.2 MediumDecember 2, 2021
• crafter software cms, craftercms crafter cms +1 more Overriding the system configuration file causes a denial of service CVE-2021-23261 4.5 MediumDecember 2, 2021
• crafter software cms, craftercms crafter cms +1 more Stored XSS Vulnerability in File Name of the File Upload function CVE-2021-23260 6.5 MediumDecember 2, 2021
• crafter software cms, craftercms crafter cms +1 more Groovy Sandbox Bypass CVE-2021-23259 4.2 MediumDecember 2, 2021
• crafter software cms, craftercms crafter cms +1 more Spring SPEL Expression Language Injection CVE-2021-23258 4.2 MediumDecember 2, 2021
• craftercms crafter cms Missing Authorization in Crafter CMS CVE-2017-15680 Fix available 6.5 MediumNovember 27, 2020
• craftercms crafter cms Path Traversal in Crafter CMS Crafter Studio CVE-2017-15681 Fix available 9.8 CriticalNovember 27, 2020
• craftercms crafter cms Cross site scripting in Crafter CMS CVE-2017-15682 Fix available 6.1 MediumNovember 27, 2020
• craftercms crafter cms XML injection in Crafter CMS CVE-2017-15683 Fix available 8.6 HighNovember 27, 2020
• craftercms crafter cms Path Traversal in Crafter CMS Crafter Studio CVE-2017-15684 Fix available 7.5 HighNovember 27, 2020
• craftercms crafter cms XML Injection in Crafter CMS Crafter Studio 3.0.1 CVE-2017-15685 Fix available 8.6 HighNovember 27, 2020
• craftercms crafter cms Cross-site scripting in Crafter CMS Crafter Studio CVE-2017-15686 Fix available 6.1 MediumNovember 27, 2020
• craftercms crafter cms OS Command Injection in craftercms:crafter-studio CVE-2018-19907 8.8 HighDecember 6, 2018