In Crafter CMS Crafter Studio 3.0.1 a directory traversal vulnerability exists which allows unauthenticated attackers to overwrite files from the operating system which can lead to RCE.
In Crafter CMS Crafter Studio 3.0.1 a directory traversal vulnerability exists which allows unauthenticated attackers to overwrite files from the operating system which can lead to RCE.
Sentiment · trusted sources
synthesissevere-fallout-0.80
CVE-2017-15681 represents a critical unauthenticated directory traversal vulnerability in Crafter CMS Crafter Studio 3.0.1 allowing OS file overwrites and RCE, indicating severe security failure.
“In Crafter CMS Crafter Studio 3.0.1 a directory traversal vulnerability exists which allows unauthenticated attackers to overwrite files from the operating system which can lead to RCE.”