Description
In Crafter CMS Crafter Studio 3.0.1 a directory traversal vulnerability exists which allows unauthenticated attackers to overwrite files from the operating system which can lead to RCE.
Remediation
References
http://crafter.com
https://docs.craftercms.org/en/3.0/security/advisory.html
Related Vulnerabilities
CVE-2018-1000865 Vulnerability in maven package org.kohsuke:groovy-sandbox
CVE-2021-34435 Vulnerability in npm package @theia/mini-browser
CVE-2014-7810 Vulnerability in maven package org.mortbay.jasper:apache-el
CVE-2016-7103 Vulnerability in maven package org.webjars:jquery-ui
CVE-2022-46366 Vulnerability in maven package tapestry:tapestry