← Database

CVE-2025-0502

CRITICAL CVSS: 9.1 Published: 2025-01-15 Modified: 2026-06-17

Description

Transmission of Private Resources into a New Sphere ('Resource Leak') vulnerability in CrafterCMS Engine on Linux, MacOS, x86, Windows, 64 bit, ARM allows Directory Indexing, Resource Leak Exposure.This issue affects CrafterCMS: from 4.0.0 before 4.0.8, from 4.1.0 before 4.1.6.

Affected Platforms

Microsoft WindowsLinux Linux KernelCraftercms CraftercmsApple Macos

Weakness Type

CWE-402

References