Exposure of Resource to Wrong Sphere in org.craftercms:crafter-search

Installations, where crafter-search is not protected, allow unauthenticated remote attackers to create, view, and delete search indexes...

CVE-2021-23264

Installations, where crafter-search is not protected, allow unauthenticated remote attackers to create, view, and delete search indexes...

CVE-2021-23264

Crafter CMS crafter-search vulnerability (CVE-2021-23264). Affected product: Crafter CMS with the crafter-search component. Root cause: lack of authentication/authorization on crafter-search allowing unauthenticated remote attackers to perform privileged actions. Impact: create, view, and delete ...

CVE-2021-23264 Transmission of Private Resources into a New Sphere ('Resource Leak') and Exposure of Resource to Wrong Sphere in Crafter Search

Installations, where crafter-search is not protected, allow unauthenticated remote attackers to create, view, and delete search indexes...