Description
In Crafter CMS Crafter Studio 3.0.1 a directory traversal vulnerability exists which allows unauthenticated attackers to overwrite files from the operating system which can lead to RCE.
Remediation
References
http://crafter.com
https://docs.craftercms.org/en/3.0/security/advisory.html
Related Vulnerabilities
CVE-2023-33946 Vulnerability in maven package com.liferay.portal:release.portal.bom
CVE-2015-0254 Vulnerability in maven package javax.servlet:jstl
CVE-2023-30543 Vulnerability in npm package @web3-react/walletconnect
CVE-2021-20262 Vulnerability in maven package org.keycloak:keycloak-core
CVE-2015-5254 Vulnerability in maven package org.apache.activemq:activemq-client