CVE-2017-1000194 - October CMS build 412 is vulnerable to Apache configuration modification via file upload functionality resulting in site compromise and possibly other applications on the server

Back Back to CVE browser

CRITICAL

October CMS build 412 is vulnerable to Apache configuration modification via file upload functionality resulting in site compromise and possibly other applications on the server

Published Nov 17, 2017

9.8

CRITICAL

CVSS 3.0

EPSS 1.24%

Description

October CMS build 412 is vulnerable to Apache configuration modification via file upload functionality resulting in site compromise and possibly other applications on the server.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-434

Unrestricted Upload of File

References (3)

Link	Providers	Tags
https://github.com/advisories/GHSA-8vh6-8w76-v6m3		Advisory
https://github.com/octobercms/october/compare/v1.0.412...v1.0.413#diff-c328b7b99eac0d17b3c71eb37038fd61R224		x_refsource_MISCPatch
https://nvd.nist.gov/vuln/detail/CVE-2017-1000194