CVE-2017-15682

In Crafter CMS Crafter Studio 3.0.1 an unauthenticated attacker is able to inject malicious JavaScript code resulting in a stored/blind XSS in the admin panel...

CVE-2017-15683

In Crafter CMS Crafter Studio 3.0.1 an unauthenticated attacker is able to create a site with specially crafted XML that allows the retrieval of OS files out-of-band...

CVE-2017-15684

Crafter CMS Crafter Studio 3.0.1 has a directory traversal vulnerability which allows unauthenticated attackers to view files from the operating system...

CVE-2017-15684

CVE-2017-15684 affects Crafter CMS Crafter Studio 3.0.1, describing a directory traversal vulnerability that allows unauthenticated attackers to view files from the operating system. The connected documents corroborate the same issue across multiple sources (Red Hat, GHSA, osv, nvd listing), cons...

CVE-2017-15685

Crafter CMS Crafter Studio 3.0.1 is affected by XML External Entity (XXE). An unauthenticated attacker can submit specially crafted XML to retrieve OS files out-of-band. The issue arises from the XXE vulnerability in this version; no additional exploit details orreal-world in-the-wild exploitatio...

CVE-2017-15686

CVE-2017-15686 affects Crafter CMS Crafter Studio 3.0.1. The vulnerability is Cross Site Scripting (XSS) that allows remote attackers to steal users’ cookies. The connected documents confirm the affected product/version and the category of vulnerability but do not provide root-cause details, expl...

CVE-2017-15686

Crafter CMS Crafter Studio 3.0.1 is affected by: Cross Site Scripting XSS, which allows remote attackers to steal users’ cookies...

Crafter CMS Permission License and Access Control Issues Vulnerability

Crafter CMS is an open source content management system CMS for digital experience applications. A vulnerability in privilege permission and access control issues exists in Crafter CMS Crafter Studio version 3.0.1, which stems from a vulnerability that allows an unauthenticated attacker to view a...

PT-2020-8126

Name of the Vulnerable Software and Affected Versions: Crafter Studio version 3.0.1 Description: A directory traversal vulnerability exists in Crafter Studio, allowing unauthenticated attackers to overwrite files from the operating system, which can lead to remote code execution RCE...

PT-2020-8125

Name of the Vulnerable Software and Affected Versions: Crafter Studio version 3.0.1 Crafter Studio versions prior to 3.0.1 Description: An IDOR vulnerability exists in Crafter Studio, allowing unauthenticated attackers to view and modify administrative data. Recommendations: For Crafter Studio...

Crafter CMS Information Disclosure Vulnerability

Crafter CMS is an open source content management system CMS for digital experience applications. An information disclosure vulnerability exists in Crafter CMS Crafter Studio version 3.0.1 that can be exploited by an attacker to be able to create a site with special XML that allows out-of-band...

PT-2020-8128

Name of the Vulnerable Software and Affected Versions: Crafter Studio versions prior to 3.0.1 Description: An unauthenticated attacker can create a site with specially crafted XML, allowing the retrieval of OS files out-of-band. This issue affects Crafter Studio, enabling attackers to access...

Crafter CMS Crafter Studio Path Traversal Vulnerability

Crafter CMS is an open source content management system CMS for digital experience applications. A path traversal vulnerability exists in Crafter CMS Crafter Studio version 3.0.1, which allows an unauthenticated attacker to view files on the operating system...

PT-2020-8130

Name of the Vulnerable Software and Affected Versions: Crafter CMS Crafter Studio version 3.0.1 Description: The issue allows an unauthenticated attacker to create a site with specially crafted XML, enabling the retrieval of OS files out-of-band due to an XML External Entity XXE issue...

Crafter CMS License Issues Vulnerability

Crafter CMS is an open source content management system CMS for digital experience applications. A security vulnerability exists in Crafter CMS Crafter Studio version 3.0.1, which stems from a vulnerability that can be exploited by an unauthenticated attacker to be able to create a site with...

Crafter CMS Crafter Studio Cross-Site Scripting Vulnerability

Crafter CMS is an open source content management system CMS for digital experience applications. A cross-site scripting vulnerability exists in Crafter CMS Crafter Studio version 3.0.1, which allows remote attackers to exploit the vulnerability to steal user cookies...

Crafter CMS Cross-Site Scripting Vulnerability

Crafter CMS is an open source content management system CMS for digital experience applications. A cross-site scripting vulnerability exists in Crafter CMS Crafter Studio version 3.0.1, which allows an attacker to exploit the vulnerability to be able to inject malicious JavaScript code, leading t...

Crafter CMS Crafter Studio Path Traversal Vulnerability

Crafter CMS is an open source content management system CMS for digital experience applications. A path traversal vulnerability exists in Crafter CMS Crafter Studio version 3.0.1, which allows an unauthenticated attacker to exploit the vulnerability to overwrite files in the operating system,...

The vulnerability of Visual Studio Code’s source editor arises from insufficient validation of input data, allowing attackers to execute arbitrary code.

The vulnerability of Visual Studio Code’s source editor exists due to insufficient testing of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of Visual Studio Code’s source editor arises from insufficient validation of input data, allowing attackers to execute arbitrary code.

The vulnerability of Visual Studio Code’s source editor exists due to insufficient checking of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created file from a remote location...