Vendor

Crafter Software

14 known vulnerabilities.

Products

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

High 7.6

CVE-2021-23267

Improper Control of Dynamically-Managed Code Resources in Crafter Studio

Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via FreeMarker static methods.

Crafter Software Crafter CMS org.craftercms:crafter-studio Maven

May 16, 2022
High 8.1

CVE-2021-23264

Transmission of Private Resources into a New Sphere ('Resource Leak') and Exposure of Resource to Wrong Sphere in Crafter Search

Installations, where crafter-search is not protected, allow unauthenticated remote attackers to create, view, and delete search indexes.

Crafter Software Crafter CMS org.craftercms:crafter-search Maven

Dec 2, 2021