Cross-site scripting in Crafter CMS Crafter Studio

MEDIO 6.1CVE-2017-15686 · GHSA-ph76-rhqq-xj7j · Published 27/11/2020 · updated 17/06/2026

En resumen

CVE-2017-15686 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a org.craftercms:crafter-studio, crafter cms (craftercms).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.1%, mayor que el 64.3% de las vulnerabilidades.
Solución: actualizar a 3.0.2, 3.0.1 o posterior.

Package	Affected versions	Patched versions
org.craftercms:crafter-studio Maven	`< 3.0.2`	`3.0.2`
crafter cms craftercms	`≥ 3.0.0, < 3.0.1`	`3.0.1`

Crafter CMS Crafter Studio 3.0.1 is affected by: Cross Site Scripting (XSS), which allows remote attackers to steal users’ cookies.

NVD description

Crafter CMS Crafter Studio 3.0.1 is affected by: Cross Site Scripting (XSS), which allows remote attackers to steal users’ cookies.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Maven

< 3.0.2

3.0.2

≥ 3.0.0, < 3.0.1

3.0.1

Más vulnerabilidades de org.craftercms:crafter-studio

Ver todo →