CVE-2017-15680: Missing Authorization

May 24, 2022 (updated June 3, 2022)

In Crafter CMS Crafter Studio 3.0.1 an IDOR vulnerability exists which allows unauthenticated attackers to view and modify administrative data.

References

docs.craftercms.org/en/3.0/security/advisory.html
github.com/advisories/GHSA-2rr8-9c6g-8j5c
nvd.nist.gov/vuln/detail/CVE-2017-15680

Detect and mitigate CVE-2017-15680 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →