CrafterCMS OS Command Injection vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2022-40635 · ADVISORY
• docs.craftercms.org/en/3.1/security/advisory.html · WEB
• craftercms/craftercms · PACKAGE

org.craftercms:craftercms のその他の脆弱性

• CVE-2026-1770中 4.5Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to exe…
• CVE-2021-23266中 4.3An anonymous user can craft a URL with text that ends up in the log viewer as is. The text can then include textual messages to mislead the …
• CVE-2021-23265中 4.3A logged-in and authenticated user with a Reviewer Role may lock a content item.