Description
Installations, where crafter-search is not protected, allow unauthenticated remote attackers to create, view, and delete search indexes.
Remediation
References
https://docs.craftercms.org/en/3.1/security/advisory.html#cv-2021120107
Related Vulnerabilities
CVE-2019-10455 Vulnerability in maven package org.jenkins-ci.plugins:icescrum
CVE-2023-31418 Vulnerability in maven package org.elasticsearch:elasticsearch
CVE-2020-13925 Vulnerability in maven package org.apache.kylin:kylin-server
CVE-2019-1003035 Vulnerability in maven package org.jenkins-ci.plugins:azure-vm-agents
CVE-2020-16044 Vulnerability in maven package org.webjars.npm:electron