Skip to content
OpenAdvisories

Package · Maven

org.craftercms:craftercms

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.5
    CVE-2026-1770

    Improper Control of Dynamically-Managed Code Resources in Crafter Studio

    Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass. By inserting malicious Groovy elements, an attacker may bypass sandbox rest…

    CrafterCMS CrafterCMS org.craftercms:craftercms Maven
  • Medium 6.4
    CVE-2022-40635 Public exploit

    Improper Control of Dynamically-Managed Code Resources in Crafter Studio

    Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass.

    Crafter Software Crafter CMS org.craftercms:craftercms Maven
  • Medium 4.3
    CVE-2021-23266

    Improper Output Neutralization for Logs in Crafter Studio

    An anonymous user can craft a URL with text that ends up in the log viewer as is. The text can then include textual messages to mislead the administrator.

    Crafter Software Crafter CMS org.craftercms:craftercms Maven