Code Injection

2022-10-1417:39:33

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

38.9%

JSON

Octobercms is vulnerable to code injection. The vulnerability exists during installations that rely on the safe mode restriction which allows an attacker to access the admin panel and open the Editor section bypassing the safe mode restrictions.

CPENameOperatorVersion
october/octoberlev3.0.62
october/octoberlev2.2.32
october/octoberlev3.0.62
october/octoberlev2.2.32

Name	Operator	Version
october/october	le	v3.0.62
october/october	le	v2.2.32
october/october	le	v3.0.62
october/october	le	v2.2.32

References

github.com/advisories/GHSA-x4q7-m6fp-4v9v

github.com/octobercms/october/security/advisories/GHSA-x4q7-m6fp-4v9v

0.001 Low

EPSS

Percentile

38.9%

JSON

Related for VERACODE:37568