Cross-site scripting in Crafter CMS Crafter Studio

MEDIO 6.1CVE-2017-15686 · GHSA-ph76-rhqq-xj7j · Published 27/11/2020 · updated 17/06/2026

In breve

CVE-2017-15686 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda org.craftercms:crafter-studio, crafter cms (craftercms).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.1%, superiore al 64.3% delle vulnerabilità.
Correzione: aggiornare a 3.0.2, 3.0.1 o successiva.

Package	Affected versions	Patched versions
org.craftercms:crafter-studio Maven	`< 3.0.2`	`3.0.2`
crafter cms craftercms	`≥ 3.0.0, < 3.0.1`	`3.0.1`

Crafter CMS Crafter Studio 3.0.1 is affected by: Cross Site Scripting (XSS), which allows remote attackers to steal users’ cookies.

NVD description

Crafter CMS Crafter Studio 3.0.1 is affected by: Cross Site Scripting (XSS), which allows remote attackers to steal users’ cookies.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Maven

< 3.0.2

3.0.2

≥ 3.0.0, < 3.0.1

3.0.1

Altre vulnerabilità di org.craftercms:crafter-studio

Vedi tutto →