Browse CVEs

CRITICAL 9.1 CVE-2025-6384 Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of CrafterCMS allows authenticated developers to execute OS co… Craftercms 4.3.0+ Fix from $2,3002025-06-19 CRITICAL 9.1 CVE-2025-0502 Transmission of Private Resources into a New Sphere ('Resource Leak') vulnerability in CrafterCMS Engine on Linux, MacOS, x86, Windows, 64 bit, ARM a… Craftercms 4.0.8 / 4.1.6+ Fix from $2,3002025-01-15 MEDIUM 6.1 CVE-2023-4136 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CrafterCMS Engine on Windows, MacOS, Linux, x86… Craftercms after 4.0.2 Fix from $1,6002023-08-03 HIGH 7.2 CVE-2023-26020 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crafter Studio on Linux, MacOS, Windows, x86, A… Crafter Cms after 4.0.1 Fix from $1,9502023-02-17 HIGH 7.2 CVE-2022-40634 Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS c… Crafter Cms 3.1.23+ Fix from $1,9502022-09-13 HIGH 7.2 CVE-2022-40635 Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS c… Crafter Cms 3.1.23+ Fix from $1,9502022-09-13 HIGH 8.8 CVE-2021-23267 Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS c… Crafter Cms 3.1.18+ Fix from $1,9502022-05-16 CRITICAL 9.1 CVE-2021-23264 Installations, where crafter-search is not protected, allow unauthenticated remote attackers to create, view, and delete search indexes. Crafter Cms 3.1.15+ Fix from $2,3002021-12-02 HIGH 7.5 CVE-2021-23263 Unauthenticated remote attackers can read textual content via FreeMarker including files /scripts/*, /templates/* and some of the files in /.git/* (n… Crafter Cms 3.1.15+ Fix from $1,9502021-12-02 HIGH 7.2 CVE-2021-23258 Authenticated users with Administrator or Developer roles may execute OS commands by SPEL Expression in Spring beans. SPEL Expression does not have s… Crafter Cms 3.1.12+ Fix from $1,9502021-12-02 HIGH 7.2 CVE-2021-23259 Authenticated users with Administrator or Developer roles may execute OS commands by Groovy Script which uses Groovy lib to render a webpage. The gro… Crafter Cms 3.1.12+ Fix from $1,9502021-12-02 HIGH 7.2 CVE-2021-23262 Authenticated administrators may modify the main YAML configuration file and load a Java class resulting in RCE. Crafter Cms 3.1.13+ Fix from $1,9502021-12-02 MEDIUM 5.4 CVE-2021-23260 Authenticated users with Site roles may inject XSS scripts via file names that will execute in the browser for this and other users of the same site. Crafter Cms 3.1.12+ Fix from $1,6002021-12-02 HIGH 8.6 CVE-2017-15683 In Crafter CMS Crafter Studio 3.0.1 an unauthenticated attacker is able to create a site with specially crafted XML that allows the retrieval of OS f… Crafter Cms 3.0.1+ Fix from $1,9502020-11-27 HIGH 8.6 CVE-2017-15685 Crafter CMS Crafter Studio 3.0.1 is affected by: XML External Entity (XXE). An unauthenticated attacker is able to create a site with specially craft… Crafter Cms 3.0.1+ Fix from $1,9502020-11-27 HIGH 7.5 CVE-2017-15684 Crafter CMS Crafter Studio 3.0.1 has a directory traversal vulnerability which allows unauthenticated attackers to view files from the operating syst… Crafter Cms 3.0.1+ Fix from $1,9502020-11-27 MEDIUM 6.1 CVE-2017-15682 In Crafter CMS Crafter Studio 3.0.1 an unauthenticated attacker is able to inject malicious JavaScript code resulting in a stored/blind XSS in the ad… Crafter Cms 3.0.1+ Fix from $1,6002020-11-27 MEDIUM 6.1 CVE-2017-15686 Crafter CMS Crafter Studio 3.0.1 is affected by: Cross Site Scripting (XSS), which allows remote attackers to steal users’ cookies. Crafter Cms 3.0.1+ Fix from $1,6002020-11-27 CRITICAL 9.8 CVE-2017-15681 In Crafter CMS Crafter Studio 3.0.1 a directory traversal vulnerability exists which allows unauthenticated attackers to overwrite files from the ope… Crafter Cms 3.0.1+ Fix from $2,3002020-11-27 MEDIUM 6.5 CVE-2017-15680 In Crafter CMS Crafter Studio 3.0.1 an IDOR vulnerability exists which allows unauthenticated attackers to view and modify administrative data. Crafter Cms 3.0.1+ Fix from $1,6002020-11-27 HIGH 7.2 CVE-2020-25803 Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS c… Studio 3.0.27 / 3.1.7+ Fix from $1,9502020-10-06 HIGH 7.2 CVE-2020-25802 Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS c… Studio 3.0.27 / 3.1.7+ Fix from $1,9502020-10-06 HIGH 8.8 CVE-2018-19907 A Server-Side Template Injection issue was discovered in Crafter CMS 3.0.18. Attackers with developer privileges may execute OS commands by Creating/… Crafter Cms after 3.0.18 Fix from $1,9502018-12-06