CVE-2017-15685 | BDVDB-2026-145200 Detail

Description#

Crafter CMS Crafter Studio 3.0.1 is affected by: XML External Entity (XXE). An unauthenticated attacker is able to create a site with specially crafted XML that allows the retrieval of OS files out-of-band.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://docs.craftercms.org/en/3.0/security/advisory.html

Exploit#

No public exploit known

History#

Version 12020-11-27Record published in the CVE List.
Version 22026-07-09Most recent update recorded in the CVE List.