PT-2020-16221 · Apache+1 · Freemarker+1

Alvaro Muñoz · Published 2020-10-06 · Updated 2022-02-09 · CVE-2020-25803

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Crafter Software Crafter CMS versions prior to 3.0.27 Crafter Software Crafter CMS versions prior to 3.1.7

Description The issue allows authenticated developers to execute OS commands via FreeMarker template exposed objects due to improper control of dynamically-managed code resources in Crafter Studio of Crafter CMS.

Recommendations For versions prior to 3.0.27, update to version 3.0.27 or later. For versions prior to 3.1.7, update to version 3.1.7 or later. As a temporary workaround, consider restricting access to the FreeMarker template exposed objects until a patch is available.

Fix

Weakness Enumeration

CWE-913

Related Identifiers

CVE-2020-25803

GHSA-8786-WG74-F522

Affected Products

Crafter Cms

Freemarker

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2020-25803 · Security Note
• https://docs.craftercms.org/en/3.1/security/advisory.html#cv-2020080102 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-25803 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-8786-wg74-f522 · Vendor Advisory
• https://t.me/cibsecurity/15084 · Telegram Post