CCrafter Software

Products

Exploited and recent CVEs

• CVE-2022-40635 Medium 6.4 Improper Control of Dynamically-Managed Code Resources in Crafter Studio 1.6%
• CVE-2022-40634 Medium 6.4 Improper Control of Dynamically-Managed Code Resources in Crafter Studio 1.6%
• CVE-2021-23267 High 7.6 Improper Control of Dynamically-Managed Code Resources in Crafter Studio 0.9%
• CVE-2021-23266 Medium 4.3 Improper Output Neutralization for Logs in Crafter Studio 0.6%
• CVE-2021-23265 Low 3.5 Improper Privilege Management in Crafter Studio 0.6%
• CVE-2021-23264 High 8.1 Transmission of Private Resources into a New Sphere ('Resource Leak') and Exposure of Resource to Wrong Sphere in Crafter Search 1.2%
• CVE-2021-23263 Medium 5.9 Transmission of Private Resources into a New Sphere ('Resource Leak') in Crafter Engine 1.7%
• CVE-2021-23262 Medium 4.2 Snakeyaml deserialization vulnerability bypass 0.6%
• CVE-2021-23261 Medium 4.5 Overriding the system configuration file causes a denial of service 0.7%
• CVE-2021-23260 Medium 6.5 Stored XSS Vulnerability in File Name of the File Upload function 0.4%
• CVE-2021-23259 Medium 4.2 Groovy Sandbox Bypass 0.7%
• CVE-2021-23258 Medium 4.2 Spring SPEL Expression Language Injection 0.7%
• CVE-2020-25803 Medium 4.2 Authenticated attackers with developer privileges in Crafter Studio may execute OS commands via deep inspection of FreeMarker template exposed objects. 1.1%
• CVE-2020-25802 Medium 4.2 Authenticated attackers with developer privileges in Crafter Studio may execute OS commands via Groovy scripting. 1.1%