Crafter Software

Records28All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high16CVSS 7.0–8.9

Exploited now

Crafter Software records in CISA KEV

No Crafter Software vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Crafter Cms 21 records MEDIUM Craftercms 4 records MEDIUM Studio 2 records LOW

Records

2 records in Studio · all components

TI-2020-15808 CVE-2020-25803 · GHSA-8786-wg74-f522

Authenticated attackers with developer privileges in Crafter Studio may execute OS…

LOW 34

Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via FreeMarker template exposed objects.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01123 Published 2020-10-06 Fixed in 3.0.27, 3.1.7 CWE-913

TI-2020-15807 CVE-2020-25802 · GHSA-wq3v-3grq-6f86

Authenticated attackers with developer privileges in Crafter Studio may execute OS commands via Groovy scripting.

LOW 34

Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy scripting.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01123 Published 2020-10-06 Fixed in 3.0.27, 3.1.7 CWE-913

Open these records in search →

Critical	2
High	16
Medium	10
Low	0
No CVSS	0