https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T06:20:12.493666+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-245678 EUVD-2026-245678 2026-10-06T06:20:12.540209+00:00 EUVD-2026-245678 https://cve.radiocsirt.org/vuln/fkie_cve-2025-6384 fkie_cve-2025-6384 2026-10-06T06:20:12.540243+00:00

Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of CrafterCMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass.

By inserting malicious Groovy elements, an attacker may bypass Sandbox restrictions and obtain RCE (Remote Code Execution).

This issue affects CrafterCMS: from 4.0.0 through 4.2.2.

 https://cve.radiocsirt.org/vuln/ghsa-5644-3vgq-2ph5 GHSA-5644-3vgq-2ph5 — Crafter Studio Groovy Sandbox Bypass 2026-10-06T06:20:12.540279+00:00

Affected: Maven: org.craftercms:crafter-studio

Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of CrafterCMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass.

By inserting malicious Groovy elements, an attacker may bypass Sandbox restrictions and obtain RCE (Remote Code Execution).

This issue affects CrafterCMS: from 4.0.0 through 4.2.2.