org.craftercms:craftercms

4 results · Feed

• Medium 4.5
  CVE-2026-1770

  Improper Control of Dynamically-Managed Code Resources in Crafter Studio

  Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass. By inserting malicious Groovy elements, an attacker may bypass sandbox rest…

  CrafterCMS CrafterCMS org.craftercms:craftercms Maven
  Feb 2, 2026
• Medium 6.4
  CVE-2022-40635 Public exploit

  Improper Control of Dynamically-Managed Code Resources in Crafter Studio

  Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass.

  Crafter Software Crafter CMS org.craftercms:craftercms Maven
  Sep 13, 2022
• Medium 4.3
  CVE-2021-23266

  Improper Output Neutralization for Logs in Crafter Studio

  An anonymous user can craft a URL with text that ends up in the log viewer as is. The text can then include textual messages to mislead the administrator.

  Crafter Software Crafter CMS org.craftercms:craftercms Maven
  May 16, 2022
• Low 3.5
  CVE-2021-23265

  Improper Privilege Management in Crafter Studio

  A logged-in and authenticated user with a Reviewer Role may lock a content item.

  Crafter Software Crafter CMS org.craftercms:craftercms Maven
  May 16, 2022