Vulnerability · Published Oct 6, 2020 · Assigned by crafter

CVE-2020-25803Authenticated attackers with developer privileges in Crafter Studio may execute OS commands via deep inspection of FreeMarker template exposed objects.

Medium 4.2

In plain English

A medium-severity security flaw in Crafter CMS from Crafter Software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 66% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)4.2Medium

Exploit odds (30 days)1.1%top 33.6% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via FreeMarker template exposed objects. This issue affects: Crafter Software Crafter CMS 3.0 versions prior to 3.0.27; 3.1 versions prior to 3.1.7.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Maven	org.craftercms:crafter-studio	3.0.27	GHSA-8786-wg74-f522
Maven	org.craftercms:crafter-studio	3.1.7	GHSA-8786-wg74-f522

Affected products (as reported)

Vendor	Product	Versions
Crafter Software	Crafter CMS	3.0 – before 3.0.273.1 – before 3.1.7

Weakness: CWE-913 · Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H

References

https://docs.craftercms.org/en/3.1/security/advisory.html#cv-2020080102 x_refsource_MISC