Description
In Crafter CMS Crafter Studio 3.0.1 a directory traversal vulnerability exists which allows unauthenticated attackers to overwrite files from the operating system which can lead to RCE.
Remediation
References
https://docs.craftercms.org/en/3.0/security/advisory.html
Related Vulnerabilities
CVE-2020-11022 Vulnerability in maven package org.webjars.npm:jquery
CVE-2023-25194 Vulnerability in maven package org.apache.kafka:kafka-clients
CVE-2016-4438 Vulnerability in maven package org.apache.struts:struts2-rest-plugin
CVE-2023-30543 Vulnerability in npm package @web3-react/walletconnect
CVE-2023-34245 Vulnerability in npm package @udecode/plate-link