CVE-2021-23264

creationtimestamp| type| source ---|---|--- 2021-12-02 18:36:43+00:00| seen| https://t.me/cibsecurity/33268...

CVE-2021-23264

Installations, where crafter-search is not protected, allow unauthenticated remote attackers to create, view, and delete search indexes...

CVE-2021-23264

Installations, where crafter-search is not protected, allow unauthenticated remote attackers to create, view, and delete search indexes...

CVE-2021-23264 Transmission of Private Resources into a New Sphere ('Resource Leak') and Exposure of Resource to Wrong Sphere in Crafter Search

Installations, where crafter-search is not protected, allow unauthenticated remote attackers to create, view, and delete search indexes...

CVE-2021-23264

Crafter CMS crafter-search vulnerability (CVE-2021-23264). Affected product: Crafter CMS with the crafter-search component. Root cause: lack of authentication/authorization on crafter-search allowing unauthenticated remote attackers to perform privileged actions. Impact: create, view, and delete ...