CVE-2022-40635CWE-913

Improper Control of Dynamically-Managed Code Resources in Crafter Studio

Medium · published September 13, 2022

CVSS v3.1
6.4
EPSS
2%
Percentile
75.8
In the wild
Unconfirmed
What it is

Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass.

The record
Technical detail
CVSS v3.1
6.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01617 · 75.8th percentile
Weakness
CWE-913 · Improper Control of Dynamically-Managed Code Resources
Published
2022-09-13T18:25Z
EPSS history
Timeline
  • 13 SEP 18:25Z
    Improper Control of Dynamically-Managed Code Resources in Crafter Studio
    cvelistv5