CVE-2017-15681
CriticalCVSS 9.8Exploitation Probability (EPSS)
High risk79th percentile - higher than 79% of all known CVEs
Summary
In Crafter CMS Crafter Studio 3.0.1, a directory traversal vulnerability exists that allows unauthenticated attackers to overwrite operating system files, potentially leading to remote code execution (RCE).
Risk Assessment
The risk for the organization includes the possibility of an unauthenticated attacker gaining full control over the server, which could result in data loss, service disruption, or further attacks on the infrastructure.
Recommendation
It is recommended to immediately upgrade Crafter CMS to a version that fixes this vulnerability and restrict access to the Crafter Studio interface to trusted networks only.
Original NVD description (English source)
In Crafter CMS Crafter Studio 3.0.1 a directory traversal vulnerability exists which allows unauthenticated attackers to overwrite files from the operating system which can lead to RCE.