High severity8.1NVD Advisory· Published Dec 2, 2021· Updated Jun 17, 2026

CVE-2021-23264

Description

Installations, where crafter-search is not protected, allow unauthenticated remote attackers to create, view, and delete search indexes.

LLM-synthesized narrative grounded in this CVE's description and references.

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
org.craftercms:crafter-searchMaven	>= 3.1.0, < 3.1.15	3.1.15

Crux Software/Crafter CMSv5
Range: 3.1
Craftercms/Crafter CMS
cpe:2.3:a:craftercms:crafter_cms:*:*:*:*:*:*:*:*
Range: >=3.1.0,<3.1.15
ghsa-coords
pkg:maven/org.craftercms/crafter-search
Range: >= 3.1.0, < 3.1.15

No linked articles in our index yet.