Skip to content
OpenAdvisories

Vendor

CrafterCMS

5 known vulnerabilities.

Products

CrafterCMS 5
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.3
    CVE-2025-6384 Public exploit

    Improper Control of Dynamically-Managed Code Resources in Crafter Studio

    Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of CrafterCMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass. By inserting malicious Groovy elements, an attacker may bypass Sandbox restr…

    CrafterCMS CrafterCMS org.craftercms:crafter-studio Maven