CVE-2021-23263CWE-402

Transmission of Private Resources into a New Sphere ('Resource Leak') in Crafter Engine

Medium · published December 2, 2021

CVSS v3.1
5.9
EPSS
2%
Percentile
77.0
In the wild
Unconfirmed
What it is

Unauthenticated remote attackers can read textual content via FreeMarker including files /scripts/*, /templates/* and some of the files in /.git/* (non-binary).

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01700 · 77.0th percentile
Weakness
CWE-402 · Transmission of Private Resources into a New Sphere ('Resource Leak')
Published
2021-12-02T15:40Z
EPSS history
Timeline
  • 02 DEC 15:40Z
    Transmission of Private Resources into a New Sphere ('Resource Leak') in Crafter Engine
    cvelistv5