CVEDB API

Authenticated administrators may modify the main YAML configuration file and load a Java class resulting in RCE.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.005

EPSS Ranking 66.9%

CVSS Severity

CVSS v3 Score 4.2

CVSS v2 Score 6.5

References

Products affected by CVE-2021-23262

Craftercms » Crafter Cms » Version: 3.1.0

cpe:2.3:a:craftercms:crafter_cms:3.1.0
Craftercms » Crafter Cms » Version: 3.1.1

cpe:2.3:a:craftercms:crafter_cms:3.1.1
Craftercms » Crafter Cms » Version: 3.1.10

cpe:2.3:a:craftercms:crafter_cms:3.1.10
Craftercms » Crafter Cms » Version: 3.1.11

cpe:2.3:a:craftercms:crafter_cms:3.1.11
Craftercms » Crafter Cms » Version: 3.1.12

cpe:2.3:a:craftercms:crafter_cms:3.1.12
Craftercms » Crafter Cms » Version: 3.1.2

cpe:2.3:a:craftercms:crafter_cms:3.1.2
Craftercms » Crafter Cms » Version: 3.1.3

cpe:2.3:a:craftercms:crafter_cms:3.1.3
Craftercms » Crafter Cms » Version: 3.1.4

cpe:2.3:a:craftercms:crafter_cms:3.1.4
Craftercms » Crafter Cms » Version: 3.1.5

cpe:2.3:a:craftercms:crafter_cms:3.1.5
Craftercms » Crafter Cms » Version: 3.1.6

cpe:2.3:a:craftercms:crafter_cms:3.1.6
Craftercms » Crafter Cms » Version: 3.1.7

cpe:2.3:a:craftercms:crafter_cms:3.1.7
Craftercms » Crafter Cms » Version: 3.1.8

cpe:2.3:a:craftercms:crafter_cms:3.1.8
Craftercms » Crafter Cms » Version: 3.1.9

cpe:2.3:a:craftercms:crafter_cms:3.1.9