org.craftercms:craftercms@4.1.5 vulnerabilities
latest version
4.3.2
latest non vulnerable version
first published
4 years ago
latest version published
9 months ago
licenses detected
- [4.0.0-rc1,)
package registry
Direct Vulnerabilities
Known vulnerabilities in the org.craftercms:craftercms package. This does not include vulnerabilities belonging to this package’s dependencies.
Fix vulnerabilities automatically
Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.
Fix for free| Vulnerability | Vulnerable Version |
|---|---|
Affected versions of this package are vulnerable to Improper Control of Dynamically-Managed Code Resources via the Groovy Sandbox. An attacker can execute arbitrary operating system commands by injecting malicious Groovy elements to bypass sandbox restrictions. How to fix Improper Control of Dynamically-Managed Code Resources? Upgrade | [4.0.0,4.5.0) |