Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Crafter CMS — Vulnerabilities & Security Advisories 14

All 14 CVE vulnerabilities found in Crafter CMS, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerabilities specific to Crafter CMS, a content management system developed by Crafter Software, focusing on common weakness types such as cross-site scripting and insecure authentication. It collects both published and recently disclosed flaws, covering advisories from the past five years. Readers can use this resource to track the vendor's security posture, understand the prevalence of specific weakness classes within the product, and review the chronological history of reported vulnerabilities. The data helps developers and security teams identify recurring patterns, assess the evolution of the software's security posture, and determine whether specific components require immediate attention based on severity and age. No individual CVE identifiers are listed in this overview; instead, the page provides a high-level summary of the vulnerability landscape for this particular product.

Vendor: Crafter Software

CVE ID Title CVSS Severity Published
CVE-2022-40635 Improper Control of Dynamically-Managed Code Resources in Crafter Studio CWE-913 6.4 Medium 2022-09-13
CVE-2022-40634 Improper Control of Dynamically-Managed Code Resources in Crafter Studio CWE-913 6.4 Medium 2022-09-13
CVE-2021-23267 Improper Control of Dynamically-Managed Code Resources in Crafter Studio CWE-913 7.6 High 2022-05-16
CVE-2021-23266 Improper Output Neutralization for Logs in Crafter Studio CWE-117 4.3 Medium 2022-05-16
CVE-2021-23265 Improper Privilege Management in Crafter Studio CWE-269 3.5 Low 2022-05-16
CVE-2021-23264 Transmission of Private Resources into a New Sphere ('Resource Leak') and Exposure of Resource to Wrong Sphere in Crafter Search CWE-402 8.1 High 2021-12-02
CVE-2021-23262 Snakeyaml deserialization vulnerability bypass CWE-913 4.2 Medium 2021-12-02
CVE-2021-23263 Transmission of Private Resources into a New Sphere ('Resource Leak') in Crafter Engine CWE-402 5.9 Medium 2021-12-02
CVE-2021-23261 Overriding the system configuration file causes a denial of service CWE-703 4.5 Medium 2021-12-02
CVE-2021-23259 Groovy Sandbox Bypass CWE-913 4.2 Medium 2021-12-02
CVE-2021-23260 Stored XSS Vulnerability in File Name of the File Upload function CWE-79 6.5 Medium 2021-12-02
CVE-2021-23258 Spring SPEL Expression Language Injection CWE-913 4.2 Medium 2021-12-02
CVE-2020-25803 Authenticated attackers with developer privileges in Crafter Studio may execute OS commands via deep inspection of FreeMarker template exposed objects. CWE-913 4.2 Medium 2020-10-06
CVE-2020-25802 Authenticated attackers with developer privileges in Crafter Studio may execute OS commands via Groovy scripting. CWE-913 4.2 Medium 2020-10-06

All 14 known CVE vulnerabilities affecting Crafter CMS with full Chinese analysis, references, and POCs where available.