CVE-2017-1000194

October CMS build 412 is vulnerable to Apache configuration modification via file upload functionality resulting in site compromise and possibly other applications on the server.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2017-11-17

Last modified

2024-09-16

Weaknesses

CWE-434

Affected products

• October (Octobercms)

References

• https://github.com/octobercms/october/compare/v1.0.412...v1.0.413#diff-c328b7b99eac0d17b3c71eb37038fd61R224