Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A Server-Side Template Injection issue was discovered in Crafter CMS 3.0.18. Attackers with developer privileges may execute OS commands by Creating/Editing a template file (.ftl filetype) that triggers a call to freemarker.template.utility.Execute in the FreeMarker library during rendering of a web page.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Crafter CMS 安全漏洞
Vulnerability Description
Crafter CMS是一套面向数字体验应用程序的开源内容管理系统（CMS）。 Crafter CMS 3.0.18及之前版本中存在安全漏洞。攻击者可通过创建/编辑模板文件（.ftl文件类型）利用该漏洞执行操作系统命令。
CVSS Information
N/A
Vulnerability Type
N/A