Description

Installations, where crafter-search is not protected, allow unauthenticated remote attackers to create, view, and delete search indexes.

Remediation

References

https://docs.craftercms.org/en/3.1/security/advisory.html#cv-2021120107

Related Vulnerabilities

CVE-2014-3600 Vulnerability in maven package org.apache.activemq:activemq-core

CVE-2020-27885 Vulnerability in maven package org.wso2.carbon.apimgt:org.wso2.carbon.apimgt.store.feature

CVE-2016-6637 Vulnerability in maven package org.cloudfoundry.identity:cloudfoundry-identity-server

CVE-2018-8026 Vulnerability in maven package org.apache.solr:solr-core

CVE-2019-1003048 Vulnerability in maven package com.programmingresearch:prqa-plugin

Severity

Critical

Classification

CWE-668 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Tags

Vendor Advisory