CVE-2022-40634

🗓️ 13 Sep 2022 18:25:09Reported by crafterType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 100 Views

Improper control of code resources in Crafter Studio allows OS command execution via FreeMarker SSTI

Reporter	Title	Published	Views	Family All 17
GithubExploit	Exploit for Improper Control of Dynamically-Managed Code Resources in Craftercms Crafter_Cms	1 Dec 202310:06	–	githubexploit
attackerkb	CVE-2022-40634	13 Sep 202215:42	–	attackerkb
Circl	CVE-2022-40634	13 Sep 202222:31	–	circl
CNNVD	Crafter CMS 安全漏洞	13 Sep 202200:00	–	cnnvd
Cvelist	CVE-2022-40634 Improper Control of Dynamically-Managed Code Resources in Crafter Studio	13 Sep 202218:25	–	cvelist
EUVD	EUVD-2022-6664	13 Sep 202218:25	–	euvd
Github Security Blog	CrafterCMS Crafter Studio Improperly Controls Dynamically-Managed Code Resources	14 Sep 202200:00	–	github
Kitploit	CVE-2022-40634	13 Oct 202616:55	–	kitploit
Mend	CVE-2022-40634	13 Sep 202218:25	–	mend
NVD	CVE-2022-40634	13 Sep 202219:15	–	nvd

NVD

Node

craftercms crafter_cmsRange3.1.0–3.1.23

[
  {
    "product": "Crafter CMS",
    "vendor": "Crafter Software",
    "versions": [
      {
        "lessThanOrEqual": "3.1.22",
        "status": "affected",
        "version": "3.1",
        "versionType": "custom"
      }
    ]
  }
]