Skip to content
OpenAdvisories
Medium · 6.9 CVE-2025-0502 EUVD-2025-1722GHSA-89xc-2h7r-qc62

Transmission of Private Resources into a New Sphere in Crafter Engine

Published Jan 15, 2025 · Updated Jan 15, 2025 · Assigned by crafter

Description

Transmission of Private Resources into a New Sphere ('Resource Leak') vulnerability in CrafterCMS Engine on Linux, MacOS, x86, Windows, 64 bit, ARM allows Directory Indexing, Resource Leak Exposure.This issue affects CrafterCMS: from 4.0.0 before 4.0.8, from 4.1.0 before 4.1.6.

Affected products

VendorProductAffectedFixed
CrafterCMS CrafterCMS 4.0.0 – < 4.0.8, 4.1.0 – < 4.1.6 4.0.8

References