CVE-2021-23263

Unauthenticated remote attackers can exploit a security configuration error in Crafter CMS to read textual content via FreeMarker . This vulnerability allows the unauthorized retrieval of files within the */scripts/, **/templates/ , and certain non-binary files in the /.git/ directories. While th...

CVE-2021-23263

Unauthenticated remote attackers can read textual content via FreeMarker including files /scripts/, /templates/ and some of the files in /.git/ non-binary...