CVE-2022-40635

2022-09-1319:15:13

Google

osv.dev

crafter cms

dynamically-managed code

groovy sandbox bypass

os commands vulnerability

0.001 Low

EPSS

Percentile

42.9%

JSON

Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass.

CPENameOperatorVersion
craftercmseq3.1.8
craftercmseq3.1.20
craftercmseq3.1.1
craftercmseq3.1.10
craftercmseq3.1.11
craftercmseq3.1.15
craftercmseq3.1.7
craftercmseq3.1.5
craftercmseq3.1.12
craftercmseq3.1.17

Name	Operator	Version
craftercms	eq	3.1.8
craftercms	eq	3.1.20
craftercms	eq	3.1.1
craftercms	eq	3.1.10
craftercms	eq	3.1.11
craftercms	eq	3.1.15
craftercms	eq	3.1.7
craftercms	eq	3.1.5
craftercms	eq	3.1.12
craftercms	eq	3.1.17

Rows per page:

1-10 of 201

References

docs.craftercms.org/en/3.1/security/advisory.html#cv-2022051602

0.001 Low

EPSS

Percentile

42.9%

JSON

Related for OSV:CVE-2022-40635