Description

Crafter CMS Crafter Studio 3.0.1 has a directory traversal vulnerability which allows unauthenticated attackers to view files from the operating system.

Remediation

References

http://crafter.com

https://docs.craftercms.org/en/3.0/security/advisory.html

Related Vulnerabilities

CVE-2023-36478 Vulnerability in maven package org.eclipse.jetty.http2:http2-hpack

CVE-2017-15703 Vulnerability in maven package org.apache.nifi:nifi-framework-core

CVE-2020-2244 Vulnerability in maven package org.jenkins-ci.plugins:build-failure-analyzer

CVE-2023-20883 Vulnerability in maven package org.springframework.boot:spring-boot-autoconfigure

CVE-2017-16061 Vulnerability in npm package tkinter

Severity

High

Classification

CWE-22 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Product Vendor Advisory