CVE-2022-40635: Improper Control of Dynamically-Managed Code Resources in Crafter Studio
Published Sep 13, 2022
·Updated
Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass.
Affected Software
1 affected component
CrafterCMS Crafter Cms>=3.1.0<3.1.23
Event History
Sep 13, 2022
CVE Published
via MITRE·06:25 PM
Data Sourced
via MITRE·06:25 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2022-40635?
CVE-2022-40635 is an Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS.
2
How does CVE-2022-40635 allow authenticated developers to execute OS commands?
CVE-2022-40635 allows authenticated developers to execute OS commands via Groovy Sandbox Bypass.
3
What software is affected by CVE-2022-40635?
Crafter CMS versions 3.1.0 to 3.1.23 are affected by CVE-2022-40635.
4
What is the severity of CVE-2022-40635?
CVE-2022-40635 has a severity rating of high (7.2).
5
How can I fix CVE-2022-40635?
To fix CVE-2022-40635, update Crafter CMS to a version beyond 3.1.23 as recommended by the vendor.