Vulnerabilities > Craftercms > Studio > 3.0.12

DATE CVE VULNERABILITY TITLE RISK
2020-10-06 CVE-2020-25803 Improper Control of Dynamically-Managed Code Resources vulnerability in Craftercms Studio
Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via FreeMarker template exposed objects.
network
low complexity
craftercms CWE-913
critical
9.0
2020-10-06 CVE-2020-25802 Improper Control of Dynamically-Managed Code Resources vulnerability in Craftercms Studio
Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy scripting.
network
low complexity
craftercms CWE-913
critical
9.0