OC
Product
october
On CISA KEVExploited in the wild
62
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 15Medium 36Low 4
Watch
Add october to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-32648 In wildKEV | 9.1 | Aug 26 | Account Takeover in Octobercms Affected: >= 1.0.471, < 1.0.472; >= 1.1.1, < 1.1.5 |
| CVE-2021-3311 | 9.8 | Feb 5 | An issue was discovered in October through build 471 Affected: through 1.0.471 |
| CVE-2017-1000197 | 9.8 | Nov 17 | October CMS build 412 is vulnerable to file path modification in asset move functionality resulting in creating creating malicious files on the server Affected: through 1.0.412 |
| CVE-2017-1000196 | 9.8 | Nov 17 | October CMS build 412 is vulnerable to PHP code execution in the asset manager functionality resulting in site compromise and possibly other applications on the server Affected: through 1.0.412 |
| CVE-2017-1000194 | 9.8 | Nov 17 | October CMS build 412 is vulnerable to Apache configuration modification via file upload functionality resulting in site compromise and possibly other applications on the server Affected: through 1.0.412 |
| CVE-2023-44382 | 9.1 | Dec 1 | October CMS safe mode bypass using Twig sandbox escape Affected: >= 3.0.0, < 3.4.15 |
Showing 6