Lucene search
GoogleOSV:CVE-2018-19907HistoryDec 06, 2018 - 7:29 a.m.
CVE-2018-19907
2018-12-0607:29:00
Google
osv.dev
3
A Server-Side Template Injection issue was discovered in Crafter CMS 3.0.18. Attackers with developer privileges may execute OS commands by Creating/Editing a template file (.ftl filetype) that triggers a call to freemarker.template.utility.Execute in the FreeMarker library during rendering of a web page.
| CPE | Name | Operator | Version |
|---|---|---|---|
| craftercms | eq | 3.0.6 | |
| craftercms | eq | 3.0.7 | |
| craftercms | eq | 3.0.8 | |
| craftercms | eq | 3.0.10 | |
| craftercms | eq | 3.0.14 | |
| craftercms | eq | 3.0.2 | |
| craftercms | eq | 3.0.13 | |
| craftercms | eq | 3.0.1 | |
| craftercms | eq | 3.0.17 | |
| craftercms | eq | 3.0.18 |
Related
prion
prion
Sql injection
2018-12-06 07:29:00
github
github
OS Command Injection in craftercms:crafter-studio
2018-12-19 19:24:18
cve
cve
CVE-2018-19907
2018-12-06 07:29:00
cvelist
cvelist
CVE-2018-19907
2018-12-06 07:00:00
osv
osv
OS Command Injection in craftercms:crafter-studio
2018-12-19 19:24:18
nvd
nvd
CVE-2018-19907
2018-12-06 07:29:00