GHSA-8vh6-8w76-v6m3

ghsaUSosv

October CMS File Upload Vulnerability

view advisory published 2022-05-13Licence: CC-BY-4.0

October CMS build 412 is vulnerable to Apache configuration modification via file upload functionality resulting in site compromise and possibly other applications on the server.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2017-1000194US	critical9.8	1.24% (69th)	—	2017-11-17
October CMS build 412 is vulnerable to Apache configuration modification via file upload functionality resulting in site compromise and possibly other applications on the server.

references

External citations — patches, advisories, analysis.

https://github.com/octobercms/octoberPACKAGE
https://github.com/octobercms/october/compare/v1.0.412...v1.0.413#diff-c328b7b99eac0d17b3c71eb37038fd61R224WEB
https://nvd.nist.gov/vuln/detail/CVE-2017-1000194ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan