CVE-2021-23264

Transmission of Private Resources into a New Sphere ('Resource Leak') and Exposure of Resource to Wrong Sphere in Crafter Search PUBLISHED

Description (CNA)

Installations, where crafter-search is not protected, allow unauthenticated remote attackers to create, view, and delete search indexes.

Vendor / product	Versions
Crafter Software / Crafter CMS	affected 3.1 before 3.1.15

CWE-402, CWE-668

CVE

No English description supplied.