Lucene search
Veracode Vulnerability DatabaseVERACODE:5455HistoryNov 17, 2017 - 10:32 a.m.
Object Injection
2017-11-1710:32:30
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.001 Low
EPSS
Percentile
31.9%
October CMS is vulnerable to object injection. The library does not properly handle the serialization of the selectedList variable in the modules/cms/widgets/AssetList.php file, allowing a malicious user to inject PHP objects that can lead to the ability to delete arbitrary files on the server.
| CPE | Name | Operator | Version |
|---|---|---|---|
| october/cms | le | 1.0.412 |
Related
cvelist
cvelist
CVE-2017-1000195
2022-10-03 16:23:10
osv
osv
CVE-2017-1000195
2017-11-17 02:29:00
nvd
nvd
CVE-2017-1000195
2017-11-17 02:29:00
cve
cve
CVE-2017-1000195
2022-10-03 16:23:10
prion
prion
Design/Logic Flaw
2017-11-17 02:29:00