Skip to content
OpenAdvisories

Package · Maven

org.craftercms:crafter-core

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.6
    CVE-2017-15683

    XML injection in Crafter CMS

    In Crafter CMS Crafter Studio 3.0.1 an unauthenticated attacker is able to create a site with specially crafted XML that allows the retrieval of OS files out-of-band.

    org.craftercms:crafter-core Maven