Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2021-23266

Improper Output Neutralization for Logs in Crafter Studio

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
crafter

Description

An anonymous user can craft a URL with text that ends up in the log viewer as is. The text can then include textual messages to mislead the administrator.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Crafter Software Crafter CMS

  • 3.1 to ≤ 3.1.17affected

References