Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Crafter CMS Crafter Studio 3.0.1 is affected by: XML External Entity (XXE). An unauthenticated attacker is able to create a site with specially crafted XML that allows the retrieval of OS files out-of-band.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Crafter CMS 信息泄露漏洞
Vulnerability Description
Crafter CMS是一套面向数字体验应用程序的开源内容管理系统（CMS）。 Crafter CMS Crafter Studio 3.0.1版本存在信息泄露漏洞，该漏洞允许攻击者可利用该漏洞能够创建一个带有特殊XML的站点，该站点允许在带外检索OS文件。
CVSS Information
N/A
Vulnerability Type
N/A