CVE-2021-23263

2021-12-0216:15:07

Google

osv.dev

7 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

65.4%

JSON

Unauthenticated remote attackers can read textual content via FreeMarker including files /scripts/, /templates/ and some of the files in /.git/* (non-binary).

CPENameOperatorVersion
craftercmseq3.1.7
craftercmseq3.1.11
craftercmseq3.1.5
craftercmseq3.1.4
craftercmseq3.1.10
craftercmseq3.1.9
craftercmseq3.1.14
craftercmseq3.1.0
craftercmseq3.1.6
craftercmseq3.1.8

Name	Operator	Version
craftercms	eq	3.1.7
craftercms	eq	3.1.11
craftercms	eq	3.1.5
craftercms	eq	3.1.4
craftercms	eq	3.1.10
craftercms	eq	3.1.9
craftercms	eq	3.1.14
craftercms	eq	3.1.0
craftercms	eq	3.1.6
craftercms	eq	3.1.8