Improper Control of Dynamically-Managed Code Resources in Crafter CMS Crafter Studio

2022-02-0923:07:54

Google

osv.dev

0.001 Low

EPSS

Percentile

42.9%

JSON

Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via FreeMarker template exposed objects. This issue affects: Crafter Software Crafter CMS 3.0 versions prior to 3.0.27; 3.1 versions prior to 3.1.7.

CPENameOperatorVersion
org.craftercms:crafter-studioeq3.1.5
org.craftercms:crafter-studioeq3.0.5
org.craftercms:crafter-studioeq3.0.14
org.craftercms:crafter-studioeq3.0.16
org.craftercms:crafter-studioeq3.1.0
org.craftercms:crafter-studioeq3.0.3
org.craftercms:crafter-studioeq3.0.0
org.craftercms:crafter-studioeq3.1.5E
org.craftercms:crafter-studioeq3.0.1
org.craftercms:crafter-studioeq3.0.19

Name	Operator	Version
org.craftercms:crafter-studio	eq	3.1.5
org.craftercms:crafter-studio	eq	3.0.5
org.craftercms:crafter-studio	eq	3.0.14
org.craftercms:crafter-studio	eq	3.0.16
org.craftercms:crafter-studio	eq	3.1.0
org.craftercms:crafter-studio	eq	3.0.3
org.craftercms:crafter-studio	eq	3.0.0
org.craftercms:crafter-studio	eq	3.1.5E
org.craftercms:crafter-studio	eq	3.0.1
org.craftercms:crafter-studio	eq	3.0.19