Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

october — Vulnerabilities & Security Advisories 41

All 41 CVE vulnerabilities found in october, with AI-generated Chinese analysis, references, and POCs.

Vendor: October CMS

CVE IDTitleCVSSSeverityPublished
CVE-2020-15248 Privilege escalation by backend users assigned to the default "Publisher" system role CWE-863 4.0 Medium2020-11-23
CVE-2020-15247 Twig Sandbox Escape by authenticated users with access to editing CMS templates when safemode is enabled. CWE-862 5.2 Medium2020-11-23
CVE-2020-15246 Local File Inclusion by unauthenticated users CWE-863 7.5 High2020-11-23
CVE-2020-15128 Reliance on Cookies without validation in OctoberCMS CWE-565 6.1 Medium2020-07-31
CVE-2020-11083 Stored XSS in October CWE-79 3.5 Low2020-07-14
CVE-2020-4061 Cross-site Scripting in OctoberPotential self-XSS when pasting content from malicious websites CWE-79 3.7 Low2020-07-02
CVE-2020-5299 Potential CSV Injection vector in OctoberCMS CWE-77 4.0 Medium2020-06-03
CVE-2020-5296 Arbitrary File Deletion vulnerability in OctoberCMS CWE-73 6.2 Medium2020-06-03
CVE-2020-5297 Upload whitelisted files to any directory in OctoberCMS CWE-73 3.4 Low2020-06-03
CVE-2020-5298 Reflected XSS when importing CSV in OctoberCMS CWE-87 4.0 Medium2020-06-03
CVE-2020-5295 Local File read vulnerability in OctoberCMS CWE-98 4.8 Medium2020-06-03

All 41 known CVE vulnerabilities affecting october with full Chinese analysis, references, and POCs where available.