GHSA-wq3v-3grq-6f86

ghsaUSosv

Improper Control of Dynamically-Managed Code Resources in Crafter CMS Crafter Studio

view advisory published 2022-02-09Licence: CC-BY-4.0

Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy scripting. This issue affects: Crafter Software Crafter CMS 3.0 versions prior to 3.0.27; 3.1 versions prior to 3.1.7.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2020-25802US	high7.2	1.12% (66th)	—	2020-10-06
Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy scripting. T…

references

External citations — patches, advisories, analysis.

https://docs.craftercms.org/en/3.1/security/advisory.html#cv-2020080101WEB
https://nvd.nist.gov/vuln/detail/CVE-2020-25802ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan