Description
In Crafter CMS Crafter Studio 3.0.1 a directory traversal vulnerability exists which allows unauthenticated attackers to overwrite files from the operating system which can lead to RCE.
Remediation
References
https://docs.craftercms.org/en/3.0/security/advisory.html
Related Vulnerabilities
CVE-2019-16561 Vulnerability in maven package org.jenkins-ci.plugins:websphere-deployer
CVE-2021-28655 Vulnerability in maven package org.apache.zeppelin:zeppelin
CVE-2020-2133 Vulnerability in maven package com.applatix.jenkins:applatix
CVE-2022-23307 Vulnerability in maven package org.apache.logging.log4j:log4j
CVE-2020-13928 Vulnerability in maven package org.apache.atlas:apache-atlas