
CVE-2025-6384: Groovy Sandbox Bypass 2 in CrafterCMS
Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass.
The vendor's disclosure and fix for this vulnerability can be found here
This vulnerability requires:
More details and the exploitation process can be found in this PDF.