CVE-2021-23263 — Transmission of Private Resources into a New Sphere ('Resource Leak') in Crafter Engine

CVE-2021-23263

Transmission of Private Resources into a New Sphere ('Resource Leak') in Crafter Engine PUBLISHED

Description (CNA)

Unauthenticated remote attackers can read textual content via FreeMarker including files /scripts/*, /templates/* and some of the files in /.git/* (non-binary).

Affected (CNA)

Vendor / product	Versions
Crafter Software / Crafter CMS	affected 3.1 before 3.1.15

CWE

CWE-402

References

https://docs.craftercms.org/en/3.1/security/advisory.html#cv-2021120106

ADP enrichment

CVE

No English description supplied.

https://docs.craftercms.org/en/3.1/security/advisory.html#cv-2021120106