critical9.8
CVE-2017-1000197
October CMS build 412 is vulnerable to file path modification in asset move functionality resulting in creating creating malicious files on the server.
Impact
October CMS build 412 is vulnerable to file path modification in asset move functionality resulting in creating creating malicious files on the server.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Octobercms | October | through 1.0.412 |