Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 22:39:15 +0000 CVE-2021-23258 — Spring SPEL Expression Language Injection https://cve.radiocsirt.org/vuln/cve-2021-23258 <p><strong>Affected:</strong> Crafter Software Crafter CMS</p> <p>Authenticated users with Administrator or Developer roles may execute OS commands by SPEL Expression in Spring beans. SPEL Expression does not have security restrictions, which will cause attackers to execute arbitrary commands remotely (RCE).</p> <p><strong>Affected:</strong> Crafter Software Crafter CMS</p> <p>Authenticated users with Administrator or Developer roles may execute OS commands by SPEL Expression in Spring beans. SPEL Expression does not have security restrictions, which will cause attackers to execute arbitrary commands remotely (RCE).</p> https://cve.radiocsirt.org/vuln/cve-2021-23258