Lucene search
GoogleOSV:GHSA-P2VM-88RG-WFR2HistoryMay 24, 2022 - 5:34 p.m.
XML injection in Crafter CMS
2022-05-2417:34:59
Google
osv.dev
5
0.002 Low
EPSS
Percentile
55.2%
In Crafter CMS Crafter Studio 3.0 prior to 3.0.1 an unauthenticated attacker is able to create a site with specially crafted XML that allows the retrieval of OS files out-of-band.
| CPE | Name | Operator | Version |
|---|---|---|---|
| org.craftercms:crafter-core | eq | 3.0.0 |
Related
cvelist
cvelist
CVE-2017-15683
2020-11-27 17:30:54
osv
osv
CVE-2017-15683
2020-11-27 18:15:11
nvd
nvd
CVE-2017-15683
2020-11-27 18:15:11
cve
cve
CVE-2017-15683
2020-11-27 18:15:11
prion
prion
Design/Logic Flaw
2020-11-27 18:15:00
github
github
XML injection in Crafter CMS
2022-05-24 17:34:59