What’s Vulnerable › Products

CrafterCMS Studio vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your CrafterCMS Studio version is affected

Latest CrafterCMS Studio vulnerabilities

• CVE-2020-25803 — Authenticated attackers with developer privileges in Crafter Studio may execute OS commands via deep inspection of FreeMarker template exposed objects. (CVSS 7.2)
• CVE-2020-25802 — Authenticated attackers with developer privileges in Crafter Studio may execute OS commands via Groovy scripting. (CVSS 7.2)