CVE-2017-15682

In Crafter CMS Crafter Studio 3.0.1 an unauthenticated attacker is able to inject malicious JavaScript code resulting in a stored/blind XSS in the admin panel...

org.craftercms:crafter-deployer (3.0.0), org.craftercms:crafter-engine (3.0.0) +1 more potentially affected by CVE-2017-15682 via org.craftercms:crafter-core (3.0.0)

org.craftercms:crafter-core MAVEN version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.craftercms:crafter-core and may be impacted: - org.craftercms:crafter-deployer 3.0.0 - org.craftercms:crafter-engine 3.0.0 -...

org.craftercms:crafter-deployer (3.0.0), org.craftercms:crafter-engine (3.0.0) +1 more potentially affected by CVE-2017-15682 via org.craftercms:crafter-core (3.0.0)

org.craftercms:crafter-core MAVEN version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.craftercms:crafter-core and may be impacted: - org.craftercms:crafter-deployer 3.0.0 - org.craftercms:crafter-engine 3.0.0 -...

CVE-2017-15682

creationtimestamp| type| source ---|---|--- 2020-11-27 20:50:18+00:00| seen| https://t.me/cibsecurity/16898 2020-12-09 07:32:07+00:00| seen| https://t.me/cibsecurity/17443...