Description
In Crafter CMS Crafter Studio 3.0.1 an IDOR vulnerability exists which allows unauthenticated attackers to view and modify administrative data.
Remediation
References
http://crafter.com
https://docs.craftercms.org/en/3.0/security/advisory.html
Related Vulnerabilities
CVE-2015-5170 Vulnerability in maven package org.cloudfoundry.identity:cloudfoundry-identity-login
CVE-2020-11023 Vulnerability in maven package org.webjars.npm:jquery
CVE-2015-5207 Vulnerability in npm package cordova-ios
CVE-2017-15691 Vulnerability in maven package org.apache.uima:uimaj-ep-cas-editor
CVE-2019-20174 Vulnerability in maven package org.webjars.bower:auth0-lock