CVE-2021-23267

2022-05-1617:15:09

Google

osv.dev

8.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.9%

JSON

Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via FreeMarker static methods.

CPENameOperatorVersion
craftercmseq3.1.17
craftercmseq3.1.1
craftercmseq3.1.12
craftercmseq3.1.16
craftercmseq3.1.5
craftercmseq3.1.10
craftercmseq3.1.0
craftercmseq3.1.4
craftercmseq3.1.9
craftercmseq3.1.11

Name	Operator	Version
craftercms	eq	3.1.17
craftercms	eq	3.1.1
craftercms	eq	3.1.12
craftercms	eq	3.1.16
craftercms	eq	3.1.5
craftercms	eq	3.1.10
craftercms	eq	3.1.0
craftercms	eq	3.1.4
craftercms	eq	3.1.9
craftercms	eq	3.1.11