Skip to content
OpenAdvisories

Vendor

Crafter Software

14 known vulnerabilities.

Products

Crafter CMS 14
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.4
    CVE-2022-40635 Public exploit

    Improper Control of Dynamically-Managed Code Resources in Crafter Studio

    Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass.

    Crafter Software Crafter CMS org.craftercms:craftercms Maven
  • Medium 6.4
    CVE-2022-40634 Public exploit

    Improper Control of Dynamically-Managed Code Resources in Crafter Studio

    Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via FreeMarker SSTI.

    Crafter Software Crafter CMS org.craftercms:crafter-studio Maven