CVE-2017-15681: Craftercms Crafter CMS

Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days.

In Crafter CMS Crafter Studio 3.0.1 a directory traversal vulnerability exists which allows unauthenticated attackers to overwrite files from the operating system which can lead to RCE.

Affected products

• Craftercms Crafter CMS: from 3.0.0, before 3.0.1 (fixed in 3.0.1)

Published 2020-11-27. Last modified 2026-07-09.