Crafter Cms
Approved changes feed: RSS · Atom
cpe:2.3:a:craftercms:crafter_cms:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Craftercms (83d6181b-da8f-541c-b1f9-7b016287ca19) |
|---|---|
| Product | Crafter Cms (02743ad3-9b19-57ec-a7df-8912be375ffb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/craftercms/craftercms |
purl2cpe | 2026-06-01 10:13:32.255486 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-26020 |
vulnerable | 2026-06-08 05:57:37.824272 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in Crafter Studio
MEDIUM (5.7)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crafter Studio on Linux, MacOS, Windows, x86, ARM, 64 bit allows SQL Injection.This issue affects CrafterCMS v4.0 from 4.0.0 through 4.0.1, and v3.1 from 3.1.0 through 3.1.26.
Published: 2023-02-17T17:24:45.089Z
Updated: 2025-03-12T20:05:48.412Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40635 |
vulnerable | 2026-06-08 05:48:27.846262 |
Improper Control of Dynamically-Managed Code Resources in Crafter Studio
MEDIUM (6.4)
Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass.
Published: 2022-09-13T18:25:10.622Z
Updated: 2024-09-16T16:13:57.113Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40634 |
vulnerable | 2026-06-08 05:48:27.845770 |
Improper Control of Dynamically-Managed Code Resources in Crafter Studio
MEDIUM (6.4)
Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via FreeMarker SSTI.
Published: 2022-09-13T18:25:09.814Z
Updated: 2024-09-16T23:36:30.569Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23267 |
vulnerable | 2026-06-08 05:30:02.592338 |
Improper Control of Dynamically-Managed Code Resources in Crafter Studio
HIGH (7.6)
Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via FreeMarker static methods.
Published: 2022-05-16T17:05:25.974Z
Updated: 2024-09-16T23:20:45.598Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23266 |
vulnerable | 2026-06-08 05:30:02.592011 |
Improper Output Neutralization for Logs in Crafter Studio
MEDIUM (4.3)
An anonymous user can craft a URL with text that ends up in the log viewer as is. The text can then include textual messages to mislead the administrator.
Published: 2022-05-16T17:05:24.567Z
Updated: 2024-09-16T17:14:27.358Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23265 |
vulnerable | 2026-06-08 05:30:02.591685 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23264 |
vulnerable | 2026-06-08 05:30:02.591385 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23263 |
vulnerable | 2026-06-08 05:30:02.591039 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23262 |
vulnerable | 2026-06-08 05:30:02.590731 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23261 |
vulnerable | 2026-06-08 05:30:02.590407 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23260 |
vulnerable | 2026-06-08 05:30:02.590070 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23259 |
vulnerable | 2026-06-08 05:30:02.589712 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23258 |
vulnerable | 2026-06-08 05:30:02.589259 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-19907 |
vulnerable | 2026-06-08 05:11:16.312924 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-15686 |
vulnerable | 2026-06-08 05:08:59.383372 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-15685 |
vulnerable | 2026-06-08 05:08:59.383064 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-15684 |
vulnerable | 2026-06-08 05:08:59.382677 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-15683 |
vulnerable | 2026-06-08 05:08:59.382403 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-15682 |
vulnerable | 2026-06-08 05:08:59.382108 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-15681 |
vulnerable | 2026-06-08 05:08:59.381802 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-15680 |
vulnerable | 2026-06-08 05:08:59.381404 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.