CVE-2021-23264

🗓️ 02 Dec 2021 15:40:59Reported by crafterType

cve🔗 web.nvd.nist.gov📰️ 9 Media mentions👁 54 Views

Installations vulnerable to unauthenticated remote attacker

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2021-23264	2 Dec 202118:36	–	circl
CNNVD	Crafter CMS 安全漏洞	2 Dec 202100:00	–	cnnvd
CNVD	Crafter CMS licensing issue vulnerability	4 Dec 202100:00	–	cnvd
Cvelist	CVE-2021-23264 Transmission of Private Resources into a New Sphere ('Resource Leak') and Exposure of Resource to Wrong Sphere in Crafter Search	2 Dec 202115:40	–	cvelist
EUVD	EUVD-2021-2427	7 Oct 202500:30	–	euvd
Github Security Blog	Exposure of Resource to Wrong Sphere in org.craftercms:crafter-search	16 Dec 202115:27	–	github
NVD	CVE-2021-23264	2 Dec 202116:15	–	nvd
OSV	GHSA-2WR2-8QJQ-GH55 Exposure of Resource to Wrong Sphere in org.craftercms:crafter-search	16 Dec 202115:27	–	osv
Prion	Code injection	2 Dec 202116:15	–	prion

NVD

Node

craftercms crafter_cmsRange3.1.0–3.1.15

[
  {
    "product": "Crafter CMS",
    "vendor": "Crafter Software",
    "versions": [
      {
        "lessThan": "3.1.15",
        "status": "affected",
        "version": "3.1",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
docs	www.docs.craftercms.org/en/3.1/security/advisory.html

21 Nov 2024 05:51Current

8.8High risk

Vulners AI Score8.8

CVSS 26.4

CVSS 3.18.1 - 9.1

EPSS0.01086