Lucene search

K
osvGoogleOSV:GHSA-2WR2-8QJQ-GH55
HistoryDec 16, 2021 - 3:27 p.m.

Exposure of Resource to Wrong Sphere in org.craftercms:crafter-search

2021-12-1615:27:35
Google
osv.dev
12
resource exposure
wrong sphere
org.craftercms:crafter-search
unauthenticated
remote attackers
search indexes

EPSS

0.003

Percentile

70.4%

Installations, where crafter-search is not protected, allow unauthenticated remote attackers to create, view, and delete search indexes.

EPSS

0.003

Percentile

70.4%

Related for OSV:GHSA-2WR2-8QJQ-GH55