Advisories · Technology

Crafter Software Crafter CMS.

Every CVE that names Crafter Software Crafter CMS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2021-23263 CVE record

CVSS 5.9 Medium

Transmission of Private Resources into a New Sphere ('Resource Leak') in Crafter Engine
- Crafter Software Crafter CMS
- CWE-402
Not analysed yet 2 Dec 2021
CVE-2021-23262 CVE record

CVSS 4.2 Medium

Snakeyaml deserialization vulnerability bypass
- Crafter Software Crafter CMS
- CWE-913
Not analysed yet 2 Dec 2021
CVE-2021-23261 CVE record

CVSS 4.5 Medium

Overriding the system configuration file causes a denial of service
- Crafter Software Crafter CMS
- CWE-703
Not analysed yet 2 Dec 2021
CVE-2021-23260 CVE record

CVSS 6.5 Medium

Stored XSS Vulnerability in File Name of the File Upload function
- Crafter Software Crafter CMS
- Cross-site scripting (XSS)
Not analysed yet 2 Dec 2021
CVE-2021-23259 CVE record

CVSS 4.2 Medium

Groovy Sandbox Bypass
- Crafter Software Crafter CMS
- CWE-913
Not analysed yet 2 Dec 2021
CVE-2021-23258 CVE record

CVSS 4.2 Medium

Spring SPEL Expression Language Injection
- Crafter Software Crafter CMS
- CWE-913
Not analysed yet 2 Dec 2021