CVE-2021-23267CWE-913

Improper Control of Dynamically-Managed Code Resources in Crafter Studio

High · published May 16, 2022

CVSS v3.1
7.6
EPSS
1%
Percentile
60.3
In the wild
Unconfirmed
What it is

Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via FreeMarker static methods.

The record
Technical detail
CVSS v3.1
7.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00931 · 60.3th percentile
Weakness
CWE-913 · Improper Control of Dynamically-Managed Code Resources
Published
2022-05-16T17:05Z
EPSS history
Timeline
  • 16 MAY 17:05Z
    Improper Control of Dynamically-Managed Code Resources in Crafter Studio
    cvelistv5