CVE-2017-9069

CVE-2017-9069

EPSS 1.9%

In MODX Revolution before 2.5.7, a user with file upload permissions is able to execute arbitrary code by uploading a file with the name .htaccess.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://citadelo.com/en/2017/04/modx-revolution-cms/https://github.com/modxcms/revolution/pull/13423