CVE-2021-23263

Crafter CMS (Crafter Engine) is affected. Unauthenticated remote attackers can read textual content via FreeMarker from /scripts/, /templates/ , and some non-binary files in /.git/* due to a security/configuration issue in FreeMarker rendering. Vulnerability details across sources consistently id...

CVE-2021-23263

Unauthenticated remote attackers can read textual content via FreeMarker including files /scripts/, /templates/ and some of the files in /.git/ non-binary...