Description
Installations, where crafter-search is not protected, allow unauthenticated remote attackers to create, view, and delete search indexes.
Remediation
References
https://docs.craftercms.org/en/3.1/security/advisory.html#cv-2021120107
Related Vulnerabilities
CVE-2019-12421 Vulnerability in maven package org.apache.nifi:nifi-web-api
CVE-2019-16546 Vulnerability in maven package org.jenkins-ci.plugins:google-compute-engine
CVE-2022-34205 Vulnerability in maven package org.jenkins-ci.plugins:jianliao
CVE-2017-7661 Vulnerability in maven package org.apache.cxf.fediz:fediz-oidc
CVE-2019-10382 Vulnerability in maven package org.jenkins-ci.plugins:labmanager