Skip to content
OpenAdvisories

Package · Maven

org.craftercms:crafter-studio

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.4
    CVE-2022-40634 Public exploit

    Improper Control of Dynamically-Managed Code Resources in Crafter Studio

    Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via FreeMarker SSTI.

    Crafter Software Crafter CMS org.craftercms:crafter-studio Maven
  • Medium 6.1
    CVE-2017-15686

    Cross-site scripting in Crafter CMS Crafter Studio

    Crafter CMS Crafter Studio 3.0.1 is affected by: Cross Site Scripting (XSS), which allows remote attackers to steal users’ cookies.

    org.craftercms:crafter-studio Maven
  • Medium 4.2
    CVE-2020-25803

    Authenticated attackers with developer privileges in Crafter Studio may execute OS commands via deep inspection of FreeMarker template exposed objects.

    Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via FreeMarker template exposed objects. This issue affects: Crafter Software Crafter CMS 3.0 versions…

    Crafter Software Crafter CMS org.craftercms:crafter-studio Maven
  • Medium 4.2
    CVE-2020-25802

    Authenticated attackers with developer privileges in Crafter Studio may execute OS commands via Groovy scripting.

    Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy scripting. This issue affects: Crafter Software Crafter CMS 3.0 versions prior to 3.0.27; 3…

    Crafter Software Crafter CMS org.craftercms:crafter-studio Maven