critical9.8
CVE-2017-1000194
October CMS File Upload Vulnerability
Impact
October CMS build 412 is vulnerable to Apache configuration modification via file upload functionality resulting in site compromise and possibly other applications on the server.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | october/october | <= 1.0.412 | 1.0.413 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Octobercms | October | through 1.0.412 |