Home CrafterCMS CVE-2025-0502
Back to CrafterCMS

CVE-2025-0502

Target: CrafterCMS Engine

CrafterCMS CVSS 9.1 Updated March 10, 2026
Threat Level CRITICAL

Executive Risk Summary

"A Resource Leak vulnerability in CrafterCMS Engine allows Directory Indexing and Resource Leak Exposure, affecting versions from 4.0.0 before 4.0.8 and from 4.1.0 before 4.1.6. This vulnerability poses a significant risk as it can lead to unauthorized access to sensitive resources."

Operational Audit Arsenal

Target Type Software
Target Asset CrafterCMS Engine
Standard Path Linux, MacOS, x86, Windows, 64 bit, ARM
PowerShell
# 🛠️ Senior Engineer Universal Audit
# Target: CrafterCMS Engine (Software)
$Target = "CrafterCMS Engine"
$SearchPaths = @("$env:windir\System32", "$env:ProgramFiles", "${env:ProgramFiles(x86)}")

Get-ChildItem -Path $SearchPaths -Filter $Target -Recurse -ErrorAction SilentlyContinue | 
Select-Object FullName, @{Name="Version";Expression={$_.VersionInfo.ProductVersion}}

Patch Impact Forecast

Reboot Required Unknown
Service Disruption

Low to Moderate

Internal Work Notes

Apply version 4.0.8 or 4.1.6 to mitigate the Resource Leak vulnerability in CrafterCMS Engine.

Intelligence Sources

Scope of Impact

Windows Linux Kernel Craftercms Macos

Original NVD Description

"Transmission of Private Resources into a New Sphere ('Resource Leak') vulnerability in CrafterCMS Engine on Linux, MacOS, x86, Windows, 64 bit, ARM allows Directory Indexing, Resource Leak Exposure.This issue affects CrafterCMS: from 4.0.0 before 4.0.8, from 4.1.0 before 4.1.6."

Data compiled from NVD, MSRC, and CISA KEV Catalog. Intelligence synthesized via AI. Scripts provided for diagnostic purposes under MIT License.