CVE-2021-23265: Improper Privilege Management in Crafter Studio
Published May 16, 2022
·Updated
A logged-in and authenticated user with a Reviewer Role may lock a content item.
Affected Software
1 affected component
CrafterCMS Crafter Cms>=3.1<3.1.18
Event History
May 16, 2022
CVE Published
via MITRE·05:05 PM
Data Sourced
via MITRE·05:05 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2021-23265.
2
What is the severity level of CVE-2021-23265?
The severity level of CVE-2021-23265 is medium.
3
How does CVE-2021-23265 affect Crafter CMS?
CVE-2021-23265 affects Crafter CMS version 3.1 up to version 3.1.18.
4
What is the impact of CVE-2021-23265?
The impact of CVE-2021-23265 is that a logged-in and authenticated user with a Reviewer Role may lock a content item.
5
Is there a fix available for CVE-2021-23265?
Yes, a fix is available for CVE-2021-23265. Please refer to the security advisory at https://docs.craftercms.org/en/3.1/security/advisory.html#cv-2022051601 for more information.