Description
Crafter CMS Crafter Studio 3.0.1 is affected by: XML External Entity (XXE). An unauthenticated attacker is able to create a site with specially crafted XML that allows the retrieval of OS files out-of-band.
Remediation
References
https://docs.craftercms.org/en/3.0/security/advisory.html
Related Vulnerabilities
CVE-2022-34784 Vulnerability in maven package org.jenkins-ci.plugins:build-metrics
CVE-2023-6394 Vulnerability in maven package io.quarkus:quarkus-smallrye-graphql-client
CVE-2022-45393 Vulnerability in maven package org.jenkins-ci.plugins:delete-log-plugin
CVE-2023-49673 Vulnerability in maven package io.jenkins.plugins:neuvector-vulnerability-scanner
CVE-2023-37579 Vulnerability in maven package org.apache.pulsar:pulsar-functions-worker