Lucene search
Veracode Vulnerability DatabaseVERACODE:5451HistoryNov 17, 2017 - 9:59 a.m.
Configuration Modification
2017-11-1709:59:11
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.002 Low
EPSS
Percentile
58.4%
October CMS is vulnerable to configuration modification. The library does not validate the type of files allowed to be uploaded, allowing a malicious user to upload malicious Apache configuration files to the server.
| CPE | Name | Operator | Version |
|---|---|---|---|
| october/cms | le | 1.0.412 |
Related
github
github
October CMS File Upload Vulnerability
2022-05-13 01:24:44
cve
cve
CVE-2017-1000194
2022-10-03 16:23:10
nvd
nvd
CVE-2017-1000194
2017-11-17 02:29:00
cvelist
cvelist
CVE-2017-1000194
2022-10-03 16:23:10
osv
osv
October CMS File Upload Vulnerability
2022-05-13 01:24:44
CVE-2017-1000194
2017-11-17 02:29:00
prion
prion
Privilege escalation
2017-11-17 02:29:00