Skip to content
OpenAdvisories

Package · Maven

org.craftercms:crafter-core

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2017-15680

    Missing Authorization in Crafter CMS

    In Crafter CMS Crafter Studio 3.0.1 an IDOR vulnerability exists which allows unauthenticated attackers to view and modify administrative data.

    org.craftercms:crafter-core Maven
  • Medium —
    CVE-2017-15682

    Cross site scripting in Crafter CMS

    In Crafter CMS Crafter Studio 3.0.1 an unauthenticated attacker is able to inject malicious JavaScript code resulting in a stored/blind XSS in the admin panel.

    org.craftercms:crafter-core Maven