Lucene search
GoogleOSV:CVE-2021-23264HistoryDec 02, 2021 - 4:15 p.m.
CVE-2021-23264
2021-12-0216:15:07
Google
osv.dev
1
Installations, where crafter-search is not protected, allow unauthenticated remote attackers to create, view, and delete search indexes.
| CPE | Name | Operator | Version |
|---|---|---|---|
| craftercms | eq | 3.1.7 | |
| craftercms | eq | 3.1.11 | |
| craftercms | eq | 3.1.5 | |
| craftercms | eq | 3.1.4 | |
| craftercms | eq | 3.1.10 | |
| craftercms | eq | 3.1.9 | |
| craftercms | eq | 3.1.14 | |
| craftercms | eq | 3.1.0 | |
| craftercms | eq | 3.1.6 | |
| craftercms | eq | 3.1.8 |
Related
cve
cve
CVE-2021-23264
2021-12-02 16:15:07
cnvd
cnvd
Crafter CMS licensing issue vulnerability
2021-12-04 00:00:00
nvd
nvd
CVE-2021-23264
2021-12-02 16:15:07
osv
osv
Exposure of Resource to Wrong Sphere in org.craftercms:crafter-search
2021-12-16 15:27:35
prion
prion
Code injection
2021-12-02 16:15:00
cvelist
cvelist
github
github
Exposure of Resource to Wrong Sphere in org.craftercms:crafter-search
2021-12-16 15:27:35