https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T12:02:34.796111+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-23258 CVE-2021-23258 — Spring SPEL Expression Language Injection 2026-10-07T12:02:34.814279+00:00

Affected: Crafter Software Crafter CMS

Authenticated users with Administrator or Developer roles may execute OS commands by SPEL Expression in Spring beans. SPEL Expression does not have security restrictions, which will cause attackers to execute arbitrary commands remotely (RCE).