CrafterCMS vulnerabilities
We track 3 vulnerabilities in CrafterCMS products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on June 19, 2025.
Latest CrafterCMS vulnerabilities
- 9.1 Critical severity
CrafterCMS: Improper Control of Dynamically-Managed Code Resources
Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of CrafterCMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass. By inserting malicious Groovy elements, an attacker may bypass Sandbox restri
- 9.1 Critical severity
CrafterCMS: Transmission of Private Resources into a New Sphere
Transmission of Private Resources into a New Sphere ('Resource Leak') vulnerability in CrafterCMS Engine on Linux, MacOS, x86, Windows, 64 bit, ARM allows Directory Indexing, Resource Leak Exposure.This issue affects CrafterCMS: from 4.0.0 before 4.0.8, from 4
- 7.2 High severity
CrafterCMS: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crafter Studio on Linux, MacOS, Windows, x86, ARM, 64 bit allows SQL Injection.This issue affects CrafterCMS v4.0 from 4.0.0 through 4.0.1, and v3.1 from 3.1.