CVE-2020-25803

creationtimestamp| type| source ---|---|--- 2020-10-06 18:28:03+00:00| seen| https://t.me/cibsecurity/15084 2023-12-18 07:35:34+00:00| seen| https://t.me/arpsyndicate/1940...

CVE-2020-25803

Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via FreeMarker template exposed objects. This issue affects: Crafter Software Crafter CMS 3.0 versions prior to 3.0.27; 3.1 versions prior t...

CVE-2020-25803

Crafter CMS Crafter Studio is affected by an SSTI/SSRF-like flaw in FreeMarker exposed objects that allows an authenticated developer to execute OS commands, potentially achieving RCE. The publicly documented impact indicates that Crafter CMS 3.0.x before 3.0.27 and 3.1.x before 3.1.7 are vulnera...