Archive

27 November 2020

Vulnerabilities first published on this day (UTC), newest first.

← October 2020 2020 / November /27 December 2020 →

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

Medium 6.5

CVE-2017-15680

Missing Authorization in Crafter CMS

In Crafter CMS Crafter Studio 3.0.1 an IDOR vulnerability exists which allows unauthenticated attackers to view and modify administrative data.

org.craftercms:crafter-core Maven

Nov 27, 2020
Medium —

CVE-2017-15682

Cross site scripting in Crafter CMS

In Crafter CMS Crafter Studio 3.0.1 an unauthenticated attacker is able to inject malicious JavaScript code resulting in a stored/blind XSS in the admin panel.

org.craftercms:crafter-core Maven

Nov 27, 2020
Medium 6.1

CVE-2017-15686

Cross-site scripting in Crafter CMS Crafter Studio

Crafter CMS Crafter Studio 3.0.1 is affected by: Cross Site Scripting (XSS), which allows remote attackers to steal users’ cookies.

org.craftercms:crafter-studio Maven

Nov 27, 2020
Medium 6.3

CVE-2020-7780

Cross-site Request Forgery (CSRF)

This affects the package com.softwaremill.akka-http-session:core_2.13 before 0.5.11; the package com.softwaremill.akka-http-session:core_2.12 before 0.5.11; the package com.softwaremill.akka-http-session:core_2.11 before 0.5.11. For older versions, endpoints …

com.softwaremill.akka-http-session:core_2.12 com.softwaremill.akka-http-session:core_2.11 com.softwaremill.akka-http-session:core_2.13 Maven

Nov 27, 2020