[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2020-25802":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":19,"cwes":20,"cpes":22,"technologies":59,"references":61,"score":64,"epss_score":65,"epss_percentile":66,"is_kev":67,"cisa_kev_date_added":68,"cisa_kev_due_date":68,"cisa_ssvc":69,"attack_mappings":75,"exploits":82},266317,"CVE-2020-25802","EUVD-2022-1235","Improper Control of Dynamically-Managed Code Resources in Crafter CMS Crafter Studio\n\nImproper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy scripting. This issue affects: Crafter Software Crafter CMS 3.0 versions prior to 3.0.27; 3.1 versions prior to 3.1.7.","2022-02-09T23:07:00Z",{"cvss_v3.1":10},{"scope":11,"version":12,"baseScore":13,"attackVector":14,"baseSeverity":15,"vectorString":16,"integrityImpact":15,"userInteraction":17,"attackComplexity":18,"availabilityImpact":15,"privilegesRequired":15,"confidentialityImpact":15},"UNCHANGED","3.1",7.2,"NETWORK","HIGH","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","NONE","LOW",true,[21],"CWE-913",[23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58],"cpe:2.3:a:craftercms:studio:3.0.13:*:*:*:*:*:*:*","cpe:2.3:a:craftercms:studio:3.1.1:*:*:*:*:*:*:*","cpe:2.3:a:craftercms:studio:3.0.19:*:*:*:*:*:*:*","cpe:2.3:a:craftercms:studio:3.0.18:*:*:*:*:*:*:*","cpe:2.3:a:craftercms:studio:3.0.16:*:*:*:*:*:*:*","cpe:2.3:a:craftercms:studio:3.0.12:*:*:*:*:*:*:*","cpe:2.3:a:craftercms:studio:3.0.24:*:*:*:*:*:*:*","cpe:2.3:a:craftercms:studio:3.0.15:*:*:*:*:*:*:*","cpe:2.3:a:craftercms:studio:3.0.0:-:*:*:*:*:*:*","cpe:2.3:a:craftercms:studio:3.0.26:*:*:*:*:*:*:*","cpe:2.3:a:craftercms:studio:3.0.11:*:*:*:*:*:*:*","cpe:2.3:a:craftercms:studio:3.0.3:*:*:*:*:*:*:*","cpe:2.3:a:craftercms:studio:3.0.21:*:*:*:*:*:*:*","cpe:2.3:a:craftercms:studio:3.0.17:*:*:*:*:*:*:*","cpe:2.3:a:craftercms:studio:3.1.5:*:*:*:*:*:*:*","cpe:2.3:a:craftercms:studio:3.0.25:*:*:*:*:*:*:*","cpe:2.3:a:craftercms:studio:3.0.6:*:*:*:*:*:*:*","cpe:2.3:a:craftercms:studio:3.0.8:*:*:*:*:*:*:*","cpe:2.3:a:craftercms:studio:3.0.2:*:*:*:*:*:*:*","cpe:2.3:a:craftercms:studio:3.1.4:*:*:*:*:*:*:*","cpe:2.3:a:craftercms:studio:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:craftercms:studio:3.0.4:*:*:*:*:*:*:*","cpe:2.3:a:craftercms:studio:3.0.7:*:*:*:*:*:*:*","cpe:2.3:a:craftercms:studio:3.1.3:*:*:*:*:*:*:*","cpe:2.3:a:craftercms:studio:3.1.6:*:*:*:*:*:*:*","cpe:2.3:a:craftercms:studio:*:*:*:*:*:*:*:*","cpe:2.3:a:craftercms:studio:3.0.23:*:*:*:*:*:*:*","cpe:2.3:a:craftercms:studio:3.0.0:pre2:*:*:*:*:*:*","cpe:2.3:a:craftercms:studio:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:craftercms:studio:3.0.22:*:*:*:*:*:*:*","cpe:2.3:a:craftercms:studio:3.0.10:*:*:*:*:*:*:*","cpe:2.3:a:craftercms:studio:3.1.0:*:*:*:*:*:*:*","cpe:2.3:a:craftercms:studio:3.0.5:*:*:*:*:*:*:*","cpe:2.3:a:craftercms:studio:3.0.14:*:*:*:*:*:*:*","cpe:2.3:a:craftercms:studio:3.0.20:*:*:*:*:*:*:*","cpe:2.3:a:craftercms:studio:3.0.9:*:*:*:*:*:*:*",[60],"Craftercms Studio",[62,63],"https:\u002F\u002Fdocs.craftercms.org\u002Fen\u002F3.1\u002Fsecurity\u002Fadvisory.html#cv-2020080101","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2020-25802",0.56,0.01123,0.66011,false,null,{"timestamp":68,"automatable":70,"tech_impact":71,"exploitation":72,"cisa_decision":73,"cisa_remediation_timeline":74},"no","partial","none",{},"FSU",[76],{"name":77,"source":78,"tactics":79,"technique_id":81},"Exploit Public-Facing Application","attack_vector",[80],"initial-access","T1190",[]]