Search Results (3 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2021-23267 1 Craftercms 1 Crafter Cms 2024-11-21 7.6 High
Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via FreeMarker static methods.
CVE-2021-23266 1 Craftercms 1 Crafter Cms 2024-11-21 4.3 Medium
An anonymous user can craft a URL with text that ends up in the log viewer as is. The text can then include textual messages to mislead the administrator.
CVE-2021-23265 1 Craftercms 1 Crafter Cms 2024-11-21 3.5 Low
A logged-in and authenticated user with a Reviewer Role may lock a content item.