Most severe vulnerabilities for "crafter cms"

9.8

First published (updated )

CVE-2017-15681

Crafter CMSTransmission of Private Resources into a New Sphere ('Resource Leak') and Exposure of Resource to Wrong Sphere in Crafter Search

9.1

First published (updated )

CVE-2021-23264

maven/org.craftercms:crafter-studioImproper Control of Dynamically-Managed Code Resources in Crafter Studio

9

First published (updated )

CVE-2021-23267

Crafter CMSAuthenticated attackers with developer privileges in Crafter Studio may execute OS commands via deep inspection of FreeMarker template exposed objects.

9

First published (updated )

CVE-2020-25803

Crafter CMSAuthenticated attackers with developer privileges in Crafter Studio may execute OS commands via Groovy scripting.

9

First published (updated )

CVE-2020-25802

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Crafter CMSOS Command Injection

8.8

First published (updated )

CVE-2018-19907

Crafter CMSCrafter CMS Crafter Studio 3.0.1 is affected by: XML External Entity (XXE). An unauthenticated attac…

8.6

First published (updated )

CVE-2017-15685

Crafter CMSIn Crafter CMS Crafter Studio 3.0.1 an unauthenticated attacker is able to create a site with specia…

8.6

First published (updated )

CVE-2017-15683

Crafter CMSTransmission of Private Resources into a New Sphere ('Resource Leak') in Crafter Engine

7.5

First published (updated )

CVE-2021-23263

Crafter CMSPath Traversal

7.5

First published (updated )

CVE-2017-15684

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

maven/org.craftercms:crafter-studioImproper Control of Dynamically-Managed Code Resources in Crafter Studio

7.2

First published (updated )

CVE-2022-40634

Crafter CMSSpring SPEL Expression Language Injection

7.2

First published (updated )

CVE-2021-23258

Crafter CMSSnakeyaml deserialization vulnerability bypass

7.2

First published (updated )

CVE-2021-23262

Crafter CMSGroovy Sandbox Bypass

7.2

First published (updated )

CVE-2021-23259

Crafter CMSImproper Control of Dynamically-Managed Code Resources in Crafter Studio

7.2

First published (updated )

CVE-2022-40635

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Crafter CMSImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in Crafter Studio

7.2

First published (updated )

CVE-2023-26020

Crafter CMSStored XSS Vulnerability in File Name of the File Upload function

6.5

First published (updated )

CVE-2021-23260

Crafter CMSIn Crafter CMS Crafter Studio 3.0.1 an IDOR vulnerability exists which allows unauthenticated attack…

6.5

First published (updated )

CVE-2017-15680

Crafter CMSXSS

6.1

First published (updated )

CVE-2017-15686

Crafter CMSXSS

6.1

First published (updated )

CVE-2017-15682

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Crafter CMSOverriding the system configuration file causes a denial of service

4.9

First published (updated )

CVE-2021-23261

Crafter CMSImproper Output Neutralization for Logs in Crafter Studio

4.3

First published (updated )

CVE-2021-23266

Crafter CMSImproper Privilege Management in Crafter Studio