Design/Logic Flaw

2017-11-1702:29:00

PRIOn knowledge base

www.prio-n.com

9.6 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.5%

JSON

October CMS build 412 is vulnerable to PHP code execution in the asset manager functionality resulting in site compromise and possibly other applications on the server.

CPENameOperatorVersion
octoberle1.0.412

CPE	Name	Operator	Version
	october	le	1.0.412

References

github.com/octobercms/october/compare/v1.0.412...v1.0.413