Local File read vulnerability in OctoberCMS
33Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 4.8epss 7.4%
from disclosure to weapon163 days
Published on NVDJun 3
1st PoC+163d
exploitation probability
7.4%top 6% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
In OctoberCMS (october/october composer package) versions from 1.0.319 and before 1.0.466, an attacker can exploit this vulnerability to read local files of an October CMS server. The vulnerability is only exploitable by an authenticated backend user with the `cms.manage_assets` permission. Issue has been patched in Build 466 (v1.0.466).
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Affected products
octobercms · octoberpublic PoCs found — 2
exploitdbwww.exploit-db.com/exploits/49045unverifiedcve_referencepacketstormsecurity.com/files/158730/October-CMS-Build-465-XSS-File-Read-File-Deletion-CSV-Injection.htmlunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://packetstormsecurity.com/files/158730/October-CMS-Build-465-XSS-File-Read-File-Deletion-CSV-Injection.htmlhttp://seclists.org/fulldisclosure/2020/Aug/2https://github.com/octobercms/october/commit/2b8939cc8b5b6fe81e093fe2c9f883ada4e3c8cchttps://github.com/octobercms/october/security/advisories/GHSA-r23f-c2j5-rx2f