Crafter CMS vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

CC

Product

Crafter CMS

by Crafter Software · last CVE Sep 13, 2022

12

CVEs

0

On KEV

9.1

Max CVSS

0

New 30D

Vulnerabilities12 In the news0 Timeline

Severity mix

Critical 1High 7Medium 4Low 0

Severity

All severities12 Critical1 High7 Medium4 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Crafter CMS to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2021-23267	8.8	1%	May 16	Improper Control of Dynamically-Managed Code Resources in Crafter Studio Affected: 3.1 through 3.1.17
CVE-2021-23263	7.5	2%	Dec 2	Transmission of Private Resources into a New Sphere ('Resource Leak') in Crafter Engine Affected: 3.1 before 3.1.15
CVE-2022-40635	7.2	2%	Sep 13	Improper Control of Dynamically-Managed Code Resources in Crafter Studio Affected: 3.1 through 3.1.22
CVE-2022-40634	7.2	2%	Sep 13	Improper Control of Dynamically-Managed Code Resources in Crafter Studio Affected: 3.1 through 3.1.22
CVE-2021-23262	7.2	1%	Dec 2	Snakeyaml deserialization vulnerability bypass Affected: 3.1 before 3.1.13
CVE-2021-23259	7.2	1%	Dec 2	Groovy Sandbox Bypass Affected: 3.1 before 3.1.12
CVE-2021-23258	7.2	1%	Dec 2	Spring SPEL Expression Language Injection Affected: 3.1 before 3.1.12