Beveiligingsadvies

CVE-2020-25802

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2020-10-06 14:09:25
Laatst bijgewerkt 2024-09-17 03:07:43
Toegewezen door crafter
CVSS-score 4.2
Status PUBLISHED

Beschrijving

Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy scripting. This issue affects: Crafter Software Crafter CMS 3.0 versions prior to 3.0.27; 3.1 versions prior to 3.1.7.