October CMS is vulnerable to filepath modifications. The library does not validate the path of a file when it is uploaded, allowing a malicious user to create malicious files and file directories on the server.
CPE | Name | Operator | Version |
---|---|---|---|
october/cms | le | 1.0.412 |