Crafter Cms
Approved changes feed: RSS · Atom
cpe:2.3:a:crafter_software:crafter_cms:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Crafter Software (ba439e95-3a54-55af-a4fd-310d4ec70351) |
|---|---|
| Product | Crafter Cms (9b8b3d14-dbc7-56d5-bc81-a61d81b43946) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-40635 |
vulnerable | 2026-06-08 05:48:27.846219 |
Improper Control of Dynamically-Managed Code Resources in Crafter Studio
MEDIUM (6.4)
Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass.
Published: 2022-09-13T18:25:10.622Z
Updated: 2024-09-16T16:13:57.113Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40634 |
vulnerable | 2026-06-08 05:48:27.844759 |
Improper Control of Dynamically-Managed Code Resources in Crafter Studio
MEDIUM (6.4)
Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via FreeMarker SSTI.
Published: 2022-09-13T18:25:09.814Z
Updated: 2024-09-16T23:36:30.569Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23267 |
vulnerable | 2026-06-08 05:30:02.592309 |
Improper Control of Dynamically-Managed Code Resources in Crafter Studio
HIGH (7.6)
Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via FreeMarker static methods.
Published: 2022-05-16T17:05:25.974Z
Updated: 2024-09-16T23:20:45.598Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23266 |
vulnerable | 2026-06-08 05:30:02.591982 |
Improper Output Neutralization for Logs in Crafter Studio
MEDIUM (4.3)
An anonymous user can craft a URL with text that ends up in the log viewer as is. The text can then include textual messages to mislead the administrator.
Published: 2022-05-16T17:05:24.567Z
Updated: 2024-09-16T17:14:27.358Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23265 |
vulnerable | 2026-06-08 05:30:02.591655 |
Improper Privilege Management in Crafter Studio
LOW (3.5)
A logged-in and authenticated user with a Reviewer Role may lock a content item.
Published: 2022-05-16T17:05:22.145Z
Updated: 2024-09-16T20:36:21.217Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23264 |
vulnerable | 2026-06-08 05:30:02.591357 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23263 |
vulnerable | 2026-06-08 05:30:02.591010 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23262 |
vulnerable | 2026-06-08 05:30:02.590699 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23261 |
vulnerable | 2026-06-08 05:30:02.590376 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23260 |
vulnerable | 2026-06-08 05:30:02.590037 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23259 |
vulnerable | 2026-06-08 05:30:02.589670 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23258 |
vulnerable | 2026-06-08 05:30:02.588171 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-25803 |
vulnerable | 2026-06-08 05:23:49.460431 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-25802 |
vulnerable | 2026-06-08 05:23:49.459218 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.