4.9
CVE-2021-23261
- EPSS 0.37%
- Veröffentlicht 02.12.2021 16:15:07
- Zuletzt bearbeitet 21.11.2024 05:51:27
- Quelle security@craftersoftware.com
- Teams Watchlist Login
- Unerledigt Login
Authenticated administrators may override the system configuration file and cause a denial of service.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Craftercms ≫ Crafter Cms Version >= 3.1.0 < 3.1.13
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.37% | 0.56 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.9 | 1.2 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
|
| nvd@nist.gov | 4 | 8 | 2.9 |
AV:N/AC:L/Au:S/C:N/I:N/A:P
|
| security@craftersoftware.com | 4.5 | 0.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H
|
CWE-703 Improper Check or Handling of Exceptional Conditions
The product does not properly anticipate or handle exceptional conditions that rarely occur during normal operation of the product.