Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Deleted Admin Can Sign In to Admin Interface
Vulnerability Description
October is a Content Management System (CMS) and web platform built on the the Laravel PHP Framework. In affected versions administrator accounts which had previously been deleted may still be able to sign in to the backend using October CMS v2.0. The issue has been patched in v2.1.12 of the october/october package. There are no workarounds for this issue and all users should update.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
认证机制不恰当
Vulnerability Title
October CMS 授权问题漏洞
Vulnerability Description
October CMS是一套基于PHP和Laravel Web应用程序框架的开源内容管理系统（CMS）。 October CMS 存在授权问题漏洞，之前已被删除的管理员帐户可能仍然能够使用 October CMS v2.0 登录到后端。
CVSS Information
N/A
Vulnerability Type
N/A