CVE-2023-4136
1 advisory.
Maven/org.craftercms:crafter-engine CVE-2023-4136: high 7.4
Cross-site Scripting (XSS) in CrafterCMS
Action: Upgrade org.craftercms:crafter-engine to 3.1.28 (3.x) or 4.0.3 (4.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.0.0 | 4.0.3 | - |
| 3.1.0 | 3.1.28 | - |
Fixed versions
| 4.0.3 | 3.1.28 |
Sources
- osv: GHSA-jfm4-3vv3-fm4v
- https://nvd.nist.gov/vuln/detail/CVE-2023-4136
- https://docs.craftercms.org/en/4.0/security/advisory.html#cv-2023080301
- https://github.com/craftercms/engine
- http://packetstormsecurity.com/files/174304/CrafterCMS-4.0.2-Cross-Site-Scripting.html
- http://seclists.org/fulldisclosure/2023/Aug/30
CVE-2023-4136 · published · modified · JSON