Vulnerabilities (CVE)

Filtered by CWE-402
Total 22 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-23264 1 Craftercms 1 Crafter Cms 2024-11-21 6.4 MEDIUM 8.1 HIGH
Installations, where crafter-search is not protected, allow unauthenticated remote attackers to create, view, and delete search indexes.
CVE-2021-23263 1 Craftercms 1 Crafter Cms 2024-11-21 5.0 MEDIUM 5.9 MEDIUM
Unauthenticated remote attackers can read textual content via FreeMarker including files /scripts/*, /templates/* and some of the files in /.git/* (non-binary).