October CMS build 412 is vulnerable to file path modification in asset move functionality resulting in creating creating malicious files on the server.
References
Configurations
History
No history.
Information
Published : 2017-11-17 02:29
Updated : 2024-02-28 16:04
NVD link : CVE-2017-1000197
Mitre link : CVE-2017-1000197
CVE.ORG link : CVE-2017-1000197
JSON object : View
Products Affected
octobercms
- october
CWE
CWE-417
Communication Channel Errors