Arbitrary Code Execution

2017-11-1710:11:11

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.003 Low

EPSS

Percentile

68.5%

JSON

October CMS is vulnerable to arbitrary code execution. The library does not restrict the files that can be uploaded, allowing a malicious user to upload a malicious PHP file to the server that can get executed.

CPENameOperatorVersion
october/cmsle1.0.412

CPE	Name	Operator	Version
	october/cms	le	1.0.412

References

github.com/octobercms/october/commit/433cf1d504d6ebeddb50279a396f03248ceb12b0

github.com/octobercms/october/compare/v1.0.412...v1.0.413#diff-c328b7b99eac0d17b3c71eb37038fd61R49

0.003 Low

EPSS

Percentile

68.5%

JSON

Related for VERACODE:5452