VulnerabilityModified

CVE-2020-5297

LOW 2.7EPSS 1.18%

Does this matter?

Lower severity and a low EPSS score (1.18%). Track it; it rarely justifies an emergency change on its own.

Description

In OctoberCMS (october/october composer package) versions from 1.0.319 and before 1.0.466, an attacker can exploit this vulnerability to upload jpg, jpeg, bmp, png, webp, gif, ico, css, js, woff, woff2, svg, ttf, eot, json, md, less, sass, scss, xml files to any directory of an October CMS server. The vulnerability is only exploitable by an authenticated backend user with the `cms.manage_assets` permission. Issue has been patched in Build 466 (v1.0.466).

CVSS 3.1: 2.7 LOWCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
EPSS: 1.18% probability · 66th percentile
CISA KEV: Not listed
Weakness: CWE-73, CWE-610
Affected: octobercms/october
Source: security-advisories@github.com

References

http://packetstormsecurity.com/files/158730/October-CMS-Build-465-XSS-File-Read-File-Deletion-CSV-Injection.htmlExploit, Third Party Advisory, VDB Entry
http://seclists.org/fulldisclosure/2020/Aug/2Exploit, Mailing List, Third Party Advisory
https://github.com/octobercms/october/commit/6711dae8ef70caf0e94cec434498012a2ccd86b8Patch, Third Party Advisory
https://github.com/octobercms/october/security/advisories/GHSA-9722-rr68-rfpgPatch, Third Party Advisory
http://packetstormsecurity.com/files/158730/October-CMS-Build-465-XSS-File-Read-File-Deletion-CSV-Injection.htmlExploit, Third Party Advisory, VDB Entry
http://seclists.org/fulldisclosure/2020/Aug/2Exploit, Mailing List, Third Party Advisory
https://github.com/octobercms/october/commit/6711dae8ef70caf0e94cec434498012a2ccd86b8Patch, Third Party Advisory
https://github.com/octobercms/october/security/advisories/GHSA-9722-rr68-rfpgPatch, Third Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.