Improper Control of Dynamically-Managed Code Resources in Crafter CMS Crafter Studio

🗓️ 09 Feb 2022 23:55:07Reported by GitHub Advisory DatabaseType

Improper control of dynamically-managed code resources in Crafter Studio Crafter CM

Reporter	Title	Published	Views	Family All 6
Cvelist	CVE-2020-25802 Authenticated attackers with developer privileges in Crafter Studio may execute OS commands via Groovy scripting.	6 Oct 202014:09	–	cvelist
OSV	Improper Control of Dynamically-Managed Code Resources in Crafter CMS Crafter Studio	9 Feb 202223:07	–	osv
OSV	CVE-2020-25802	6 Oct 202014:15	–	osv
CVE	CVE-2020-25802	6 Oct 202014:15	–	cve
Prion	Design/Logic Flaw	6 Oct 202014:15	–	prion
NVD	CVE-2020-25802	6 Oct 202014:15	–	nvd

Vulners

Node

org.craftercms crafter-studioRange3.1–3.1.7

org.craftercms crafter-studioRange3.0–3.0.27

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-25802
docs	www.docs.craftercms.org/en/3.1/security/advisory.html
github	www.github.com/advisories/GHSA-wq3v-3grq-6f86

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

09 Feb 2022 23:07Current

6.9Medium risk

Vulners AI Score6.9

CVSS29

CVSS34.2 - 7.2

EPSS0.001

CWE-913