CVE-2023-44382

The CVE-2023-44382 entry concerns October CMS: an authenticated backend user granted editor.cms_pages, editor.cms_layouts, or editor.cms_partials can bypass cms.safe_mode by escaping the Twig sandbox, enabling execution of arbitrary PHP. Concrete details from multiple sources confirm the vulnerab...

CVE-2023-44382 October CMS safe mode bypass using Twig sandbox escape

October is a Content Management System CMS and web platform to assist with development workflow. An authenticated backend user with the editor.cmspages, editor.cmslayouts, or editor.cmspartials permissions who would normally not be permitted to provide PHP code to be executed by the CMS due to...

October Code Injection Vulnerability

October is an open source Content Management System CMS and web platform from October. October suffers from a code injection vulnerability, which originates from the use of "editor.cmspages", "editor.cmslayouts" or "editor.cmsparticles" with "cms.safemode" enabled. editor.cmspages",...

Stored Cross Site Scripting (XSS)

October CMS is vulnerable to Stored Cross Site Scripting. The vulnerability is due to improperly validating uploaded SVG files for malicious scripts. This issue can be exploited by an attacker via including malicious JavaScript in the SVG files resulting in Stored Cross Site Scripting...

Template Injection

October CMS is vulnerable to Template Injection. The vulnerability is caused by a crafted request which includes PHP code in the CMS template, where an authenticated backend user possessing the editor.cmspages, editor.cmslayouts, or editor.cmspartials can execute arbitrary PHP code even when the...

Server Side Template Injection

October CMS is vulnerable to Server Side Template Injection. The vulnerability is due improper sandboxing of twig code, where an authenticated backend user possessing the editor.cmspages, editor.cmslayouts, or editor.cmspartials permissions, can execute PHP code even when cms.safemode being...

October CMS safe mode bypass using Twig sandbox escape

Impact An authenticated backend user with the editor.cmspages, editor.cmslayouts, or editor.cmspartials permissions who would normally not be permitted to provide PHP code to be executed by the CMS due to cms.safemode being enabled can write specific Twig code to escape the Twig sandbox and execu...

GHSA-P8Q3-H652-65VX October CMS safe mode bypass using Twig sandbox escape

Impact An authenticated backend user with the editor.cmspages, editor.cmslayouts, or editor.cmspartials permissions who would normally not be permitted to provide PHP code to be executed by the CMS due to cms.safemode being enabled can write specific Twig code to escape the Twig sandbox and execu...

GHSA-Q22J-5R3G-9HMH October CMS safe mode bypass using Page template injection

Impact An authenticated backend user with the editor.cmspages, editor.cmslayouts, or editor.cmspartials permissions who would normally not be permitted to provide PHP code to be executed by the CMS due to cms.safemode being enabled can craft a special request to include PHP code in the CMS...

CVE-2023-44383

October is a Content Management System CMS and web platform to assist with development workflow. A user with access to the media manager that stores SVG files could create a stored XSS attack against themselves and any other user with access to the media manager when SVG files are supported. This...

Cross site scripting

October is a Content Management System CMS and web platform to assist with development workflow. A user with access to the media manager that stores SVG files could create a stored XSS attack against themselves and any other user with access to the media manager when SVG files are supported. This...

CVE-2023-44383 October CMS stored XSS by authenticated backend user with improper configuration

October is a Content Management System CMS and web platform to assist with development workflow. A user with access to the media manager that stores SVG files could create a stored XSS attack against themselves and any other user with access to the media manager when SVG files are supported. This...

CVE-2023-44383 October CMS stored XSS by authenticated backend user with improper configuration

October is a Content Management System CMS and web platform to assist with development workflow. A user with access to the media manager that stores SVG files could create a stored XSS attack against themselves and any other user with access to the media manager when SVG files are supported. This...

CVE-2023-44383

Summary: CVE-2023-44383 affects October CMS versions affected by stored XSS when SVGs are uploaded to the Media Manager. What’s affected: October CMS (versions 3.0–3.5.x per sources) where the media manager stores SVG files. Root cause: Inadequate validation/ sanitization of uploaded SVG content ...

October Cross-Site Scripting Vulnerability

October is an open source content management system CMS and web platform from October. A cross-site scripting vulnerability exists in October versions 3.0 through 3.5.2, which originates when SVG files are supported, and allows a user with access to the Media Manager, where SVG files are stored, ...

PT-2023-29217 · October · October

Name of the Vulnerable Software and Affected Versions: October versions prior to 3.4.15 Description: The issue allows an authenticated backend user with the editor.cms pages, editor.cms layouts, or editor.cms partials permissions to write specific Twig code and execute arbitrary PHP, despite...

Withdrawn Advisory: October Cross-site Scripting vulnerability

Withdrawn Advisory This advisory has been withdrawn because the vulnerability affects October CMS's installer, not October CMS. The installer deletes all folders and files upon completion of installation. The vulnerability is valid, but because October's installer is not part of one of the GitHub...

GHSA-2G8P-J2R6-VQPJ Withdrawn Advisory: October Cross-site Scripting vulnerability

Withdrawn Advisory This advisory has been withdrawn because the vulnerability affects October CMS's installer, not October CMS. The installer deletes all folders and files upon completion of installation. The vulnerability is valid, but because October's installer is not part of one of the GitHub...

CVE-2023-43876

A Cross-Site Scripting XSS vulnerability in installation of October v.3.4.16 allows an attacker to execute arbitrary web scripts via a crafted payload injected into the dbhost field...

CVE-2023-43876

A Cross-Site Scripting XSS vulnerability in installation of October v.3.4.16 allows an attacker to execute arbitrary web scripts via a crafted payload injected into the dbhost field...