ByteOS Network

NVD Vulnerability Details :

CVE-2021-23264

Analyzed

Source-security@craftersoftware.com

Published At-02 Dec, 2021 | 16:15

Updated At-04 Dec, 2021 | 02:44

Installations, where crafter-search is not protected, allow unauthenticated remote attackers to create, view, and delete search indexes.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Type	Version	Base score	Base severity	Vector
Primary	3.1	9.1	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Secondary	3.1	8.1	HIGH	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	6.4	MEDIUM	AV:N/AC:L/Au:N/C:P/I:P/A:N

craftercms>>crafter_cms>>Versions from 3.1.0(inclusive) to 3.1.15(exclusive)

CWE ID	Type	Source
CWE-668	Primary	nvd@nist.gov
CWE-402	Secondary	security@craftersoftware.com
CWE-668	Secondary	security@craftersoftware.com

Hyperlink	Source	Resource
https://docs.craftercms.org/en/3.1/security/advisory.html#cv-2021120107	security@craftersoftware.com	Vendor Advisory