CVE-2017-1000197

October CMS build 412 is vulnerable to file path modification in asset move functionality resulting in creating creating malicious files on the server.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2017-11-17

Last modified

2024-09-16

Weaknesses

CWE-417

Affected products

• October (Octobercms)

References

• https://github.com/octobercms/october/compare/v1.0.412...v1.0.413#diff-eef90a4e3585febf6489916dc242d0ceR241