Package · Maven

org.craftercms:crafter-search

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

High 8.1

CVE-2021-23264

Transmission of Private Resources into a New Sphere ('Resource Leak') and Exposure of Resource to Wrong Sphere in Crafter Search

Installations, where crafter-search is not protected, allow unauthenticated remote attackers to create, view, and delete search indexes.

Crafter Software Crafter CMS org.craftercms:crafter-search Maven

Dec 2, 2021