← All credits
Kai Zhao (ToTU Security Team)
7 vulnerability records and advisories credit this contributor.
CVE-2020-25802
Authenticated attackers with developer privileges in Crafter Studio may execute OS commands via Groovy scripting.
CVE-2021-23261
Overriding the system configuration file causes a denial of service
CVE-2021-23267
Improper Control of Dynamically-Managed Code Resources in Crafter Studio
CVE-2021-23258
Spring SPEL Expression Language Injection
CVE-2021-23262
Snakeyaml deserialization vulnerability bypass
CVE-2021-23259
Groovy Sandbox Bypass
CVE-2021-23260
Stored XSS Vulnerability in File Name of the File Upload function