Crafter Cms Security Vulnerabilities and Issues — Crafter Cms CVE List

Lucene search

CraftercmsCrafter Cms

3 matches found

CVE•added 2020/11/27 6:15 p.m.•94 views

CVE-2017-15681

In Crafter CMS Crafter Studio 3.0.1 a directory traversal vulnerability exists which allows unauthenticated attackers to overwrite files from the operating system which can lead to RCE.

9.8CVSS9.4AI score0.01976EPSS

CVE•added 2022/05/16 5:15 p.m.•65 views

CVE-2021-23267

Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via FreeMarker static methods.

9CVSS8.4AI score0.00462EPSS

CVE•added 2021/12/02 4:15 p.m.•46 views

CVE-2021-23264

Installations, where crafter-search is not protected, allow unauthenticated remote attackers to create, view, and delete search indexes.

9.1CVSS8.8AI score0.01086EPSS