Description
Installations, where crafter-search is not protected, allow unauthenticated remote attackers to create, view, and delete search indexes.
Remediation
References
https://docs.craftercms.org/en/3.1/security/advisory.html#cv-2021120107
Related Vulnerabilities
CVE-2020-1945 Vulnerability in maven package org.apache.ant:ant
CVE-2020-2187 Vulnerability in maven package org.jenkins-ci.plugins:ec2
CVE-2023-24435 Vulnerability in maven package org.jenkins-ci.plugins:ghprb
CVE-2020-1935 Vulnerability in maven package org.apache.tomcat.embed:tomcat-embed-core
CVE-2019-10344 Vulnerability in maven package io.jenkins:configuration-as-code