VendorsCrafterCMSstudioany version
Vulnerabilities

CrafterCMS Crafter CMS Studio any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2020-25802
Authenticated attackers with developer privileges in Crafter Studio may execute OS commands via Groovy scripting.
Published 2020-10-06 · Modified
9.0EPSS 0.011
CVE-2020-25803
Authenticated attackers with developer privileges in Crafter Studio may execute OS commands via deep inspection of FreeMarker template exposed objects.
Published 2020-10-06 · Modified
9.0EPSS 0.011