Crafter CMS
0 remedies
cpe:2.3:a:craftercms:craftercms:*:*:*:*:*:*:*
0 remedies
- >= 4.0, < 4.5.0
Crafter CMS Crafter Studio Groovy Sandbox Bypass Remote Code Execution Vulnerability
Vulnerability
A remote code execution vulnerability has been identified in Crafter CMS's Crafter Studio, specifically in versions 4.0 prior to 4.5.0. This vulnerability arises from an improper control of dynamically-managed code resources, allowing authenticated developers to execute operating system commands by bypassing sandbox restrictions in the Groovy environment.
Impact
Exploitation of this vulnerability allows for remote code execution on the server where Crafter CMS is running.
Added: Feb 2, 2026, 5:19 PM
Updated: Feb 2, 2026, 5:19 PM
Vulnerability Rating
Custom Algorithm
spread
3.4impact
2.5exploitability
5.4remediation
0.0relevance
2.4threat
0.0urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.