CyberRota Analysis
AI-GeneratedCraftplan versions prior to 0.5.1 are vulnerable to a broken access control issue that permits unauthenticated attackers to access sensitive credentials, including SMTP passwords and API keys, through a flawed authorization policy on the Settings resource. This vulnerability arises from an unconditional authorization check that fails to enforce proper identity verification, allowing attackers to exploit the settings API endpoint. Organizations using Craftplan should prioritize patching to mitigate the risk of credential exposure.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Craftplan before 0.5.1 contains a broken access control vulnerability that allows unauthenticated attackers to read sensitive credentials by exploiting an unconditional authorization policy on the Settings resource. Attackers can send a GET request to the settings API endpoint with a valid record ID to retrieve decrypted SMTP passwords, email API keys, and email API secrets due to the read policy using an always-allow authorization check that bypasses all identity verification.