October CMS File Upload Vulnerability

2022-05-1301:24:44

Google

osv.dev

0.002 Low

EPSS

Percentile

58.4%

JSON

October CMS build 412 is vulnerable to Apache configuration modification via file upload functionality resulting in site compromise and possibly other applications on the server.

CPENameOperatorVersion
october/octobereq1.0.357
october/octobereq1.0.334
october/octobereq1.0.397
october/octobereq1.0.324
october/octobereq1.0.387
october/octobereq1.0.389
october/octobereq1.0.412
october/octobereq1.0.395
october/octobereq1.0.388
october/octobereq1.0.377

Name	Operator	Version
october/october	eq	1.0.357
october/october	eq	1.0.334
october/october	eq	1.0.397
october/october	eq	1.0.324
october/october	eq	1.0.387
october/october	eq	1.0.389
october/october	eq	1.0.412
october/october	eq	1.0.395
october/october	eq	1.0.388
october/october	eq	1.0.377