Skip to content
OpenAdvisories

Package · Maven

org.craftercms:crafter-core

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Medium 6.5
    CVE-2017-15680

    Missing Authorization in Crafter CMS

    In Crafter CMS Crafter Studio 3.0.1 an IDOR vulnerability exists which allows unauthenticated attackers to view and modify administrative data.

    org.craftercms:crafter-core Maven
  • Medium —
    CVE-2017-15682

    Cross site scripting in Crafter CMS

    In Crafter CMS Crafter Studio 3.0.1 an unauthenticated attacker is able to inject malicious JavaScript code resulting in a stored/blind XSS in the admin panel.

    org.craftercms:crafter-core Maven
  • High 8.6
    CVE-2017-15683

    XML injection in Crafter CMS

    In Crafter CMS Crafter Studio 3.0.1 an unauthenticated attacker is able to create a site with specially crafted XML that allows the retrieval of OS files out-of-band.

    org.craftercms:crafter-core Maven