CVE-2017-15680

MediumCVSS 6.5

Published: 27/11/2020(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.74%

50th percentile - higher than 50% of all known CVEs

Summary

In Crafter CMS Crafter Studio 3.0.1 an IDOR vulnerability exists which allows unauthenticated attackers to view and modify administrative data.

Risk Assessment

The risk involves unauthorized access to sensitive administrative data and its modification, potentially leading to full compromise of the CMS system.

Recommendation

Immediately upgrade Crafter CMS to a patched version and implement access control mechanisms for all administrative resources.

Original NVD description (English source)

In Crafter CMS Crafter Studio 3.0.1 an IDOR vulnerability exists which allows unauthenticated attackers to view and modify administrative data.