Description
In Crafter CMS Crafter Studio 3.0.1 a directory traversal vulnerability exists which allows unauthenticated attackers to overwrite files from the operating system which can lead to RCE.
Remediation
References
http://crafter.com
https://docs.craftercms.org/en/3.0/security/advisory.html
Related Vulnerabilities
CVE-2022-41243 Vulnerability in maven package com.smalltest:smalltest
CVE-2022-37022 Vulnerability in maven package org.apache.geode:geode-core
CVE-2018-1999001 Vulnerability in maven package org.jenkins-ci.main:jenkins-core
CVE-2021-21655 Vulnerability in maven package org.jenkins-ci.plugins:p4
CVE-2023-24433 Vulnerability in maven package io.jenkins.plugins:macstadium-orka