Beveiligingsadvies

CVE-2020-5295

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2020-06-03 21:50:12

Laatst bijgewerkt 2024-08-04 08:22:09

Toegewezen door GitHub_M

CVSS-score 4.8

Status PUBLISHED

Beschrijving

In OctoberCMS (october/october composer package) versions from 1.0.319 and before 1.0.466, an attacker can exploit this vulnerability to read local files of an October CMS server. The vulnerability is only exploitable by an authenticated backend user with the `cms.manage_assets` permission. Issue has been patched in Build 466 (v1.0.466).

← Alle CVE's bekijken Bekijk op cve.org ↗