CVE-2017-15684: Craftercms Crafter CMS

High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days.

Crafter CMS Crafter Studio 3.0.1 has a directory traversal vulnerability which allows unauthenticated attackers to view files from the operating system.

Affected products

• Craftercms Crafter CMS: from 3.0.0, before 3.0.1 (fixed in 3.0.1)

Published 2020-11-27. Last modified 2026-07-09.