GHSA-8vh6-8w76-v6m3
October CMS File Upload Vulnerability
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | october/october | < 1.0.413 | 1.0.413 |
Details
As written in the advisory (Markdown source, shown as plain text).
October CMS build 412 is vulnerable to Apache configuration modification via file upload functionality resulting in site compromise and possibly other applications on the server.
References
External links from the advisory. They lead to third-party sites.