What’s Vulnerable › Products

Crafter Software Crafter CMS vulnerabilities

21 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your Crafter Software Crafter CMS version is affected

Latest Crafter Software Crafter CMS vulnerabilities

• CVE-2023-26020 — Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in Crafter Studio (CVSS 7.2)
• CVE-2022-40635 — Improper Control of Dynamically-Managed Code Resources in Crafter Studio (CVSS 7.2)
• CVE-2022-40634 — Improper Control of Dynamically-Managed Code Resources in Crafter Studio (CVSS 7.2)
• CVE-2021-23267 — Improper Control of Dynamically-Managed Code Resources in Crafter Studio (CVSS 8.8)
• CVE-2021-23266 — Improper Output Neutralization for Logs in Crafter Studio (CVSS 4.3)
• CVE-2021-23265 — Improper Privilege Management in Crafter Studio (CVSS 4.3)
• CVE-2021-23264 — Transmission of Private Resources into a New Sphere ('Resource Leak') and Exposure of Resource to Wrong Sphere in Crafter Search (CVSS 9.1)
• CVE-2021-23263 — Transmission of Private Resources into a New Sphere ('Resource Leak') in Crafter Engine (CVSS 7.5)
• CVE-2021-23262 — Snakeyaml deserialization vulnerability bypass (CVSS 7.2)
• CVE-2021-23261 — Overriding the system configuration file causes a denial of service (CVSS 4.9)
• CVE-2021-23260 — Stored XSS Vulnerability in File Name of the File Upload function (CVSS 5.4)
• CVE-2021-23259 — Groovy Sandbox Bypass (CVSS 7.2)
• CVE-2021-23258 — Spring SPEL Expression Language Injection (CVSS 7.2)
• CVE-2017-15686 — (CVSS 6.1)
• CVE-2017-15685 — (CVSS 8.6)
• CVE-2017-15684 — (CVSS 7.5)
• CVE-2017-15683 — (CVSS 8.6)
• CVE-2017-15682 — (CVSS 6.1)
• CVE-2017-15681 — (CVSS 9.8)
• CVE-2017-15680 — (CVSS 6.5)
• CVE-2018-19907 — (CVSS 8.8)