Description
Installations, where crafter-search is not protected, allow unauthenticated remote attackers to create, view, and delete search indexes.
Remediation
References
https://docs.craftercms.org/en/3.1/security/advisory.html#cv-2021120107
Related Vulnerabilities
CVE-2022-34158 Vulnerability in maven package org.apache.jspwiki:jspwiki-main
CVE-2023-40037 Vulnerability in maven package org.apache.nifi:nifi-hikari-dbcp-service
CVE-2019-1003099 Vulnerability in maven package org.jenkins-ci.plugins:openid
CVE-2019-10475 Vulnerability in maven package org.jenkins-ci.plugins:build-metrics
CVE-2023-32978 Vulnerability in maven package org.jenkins-ci.plugins:ldap