Security feature bypass

2021-12-0216:15:00

PRIOn knowledge base

www.prio-n.com

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.9%

Authenticated administrators may modify the main YAML configuration file and load a Java class resulting in RCE.

CPENameOperatorVersion
crafter_cmsge3.1.0
crafter_cmslt3.1.13

CPE	Name	Operator	Version
	crafter_cms	ge	3.1.0
	crafter_cms	lt	3.1.13

References

docs.craftercms.org/en/3.1/security/advisory.html