Installations, where crafter-search is not protected, allow unauthenticated remote attackers to create, view, and delete search indexes.
{ "nvd_published_at": "2021-12-02T16:15:00Z", "github_reviewed_at": "2021-12-06T21:35:33Z", "severity": "CRITICAL", "github_reviewed": true, "cwe_ids": [ "CWE-402", "CWE-668" ] }