Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.craftercms:crafter-core

3 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3
Registry
Maven Central

Advisories 3

  • In Crafter CMS Crafter Studio 3.0.1 an IDOR vulnerability exists which allows unauthenticated attackers to view and modify administrative…

    Affected: from 3.0.0, fixed in 3.0.1.

  • In Crafter CMS Crafter Studio 3.0.1 an unauthenticated attacker is able to inject malicious JavaScript code resulting in a stored/blind…

    Affected: from 3.0.0, fixed in 3.0.1.

  • In Crafter CMS Crafter Studio 3.0.1 an unauthenticated attacker is able to create a site with specially crafted XML that allows the…

    Affected: from 3.0.0, fixed in 3.0.1.