CVE-2025-0502 - CVE House
Back to Database
Status published Medium CVE-2025-0502

Transmission of Private Resources into a New Sphere in Crafter Engine

Vulnerability Description

Transmission of Private Resources into a New Sphere ('Resource Leak') vulnerability in CrafterCMS Engine on Linux, MacOS, x86, Windows, 64 bit, ARM allows Directory Indexing, Resource Leak Exposure.This issue affects CrafterCMS: from 4.0.0 before 4.0.8, from 4.1.0 before 4.1.6.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-0502

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Carlos Ortiz, https://github.com/cortiz

References

More from CrafterCMS

View All →
CVE-2025-6384
Improper Control of Dynamically-Managed Code Resources in Crafter Studio
High 7.3
CVE-2023-4136
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Crafter Engine
High 7.4
CVE-2023-26020
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in Crafter Studio
Medium 5.7

Affected Vendor

Affected Software

CrafterCMS
Vulnerable Versions:
4.0.0, 4.1.0

Timeline

Official Publish: January 15th, 2025
Last Modified: January 15th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-402

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.