目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

octobercms 厂商漏洞列表 / CVE 中文分析 39

octobercms 厂商相关 39 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

OctoberCMS 是一款基于 Laravel 框架的开源内容管理系统，旨在为开发者提供灵活、模块化的网站构建方案。其历史漏洞多集中于远程代码执行（RCE）、跨站脚本（XSS）及权限绕过，累计收录 39 条 CVE。主要风险源于插件生态的安全审查不足及框架版本滞后。建议用户定期更新核心组件，严格审计第三方插件代码，并启用最小权限原则以缓解潜在攻击面。

找到 39 条结果 / 39 清除筛选
Top products by octobercms: october
CVE ID 标题 CVSS 风险等级 Published
CVE-2026-29179 October 安全漏洞 — october CWE-863 3.3 Low 2026-04-21
CVE-2026-27937 October 跨站脚本漏洞 — october CWE-79 3.1 Low 2026-04-21
CVE-2026-26274 October 安全漏洞 — october CWE-184 6.6 Medium 2026-04-21
CVE-2026-26067 October 安全漏洞 — october CWE-863 4.9 Medium 2026-04-21
CVE-2026-25133 October 跨站脚本漏洞 — october CWE-79 7.5 - 2026-04-14
CVE-2026-25125 October 信息泄露漏洞 — october CWE-200 4.9 Medium 2026-04-14
CVE-2026-24907 October 跨站脚本漏洞 — october CWE-79 5.4 - 2026-04-14
CVE-2026-24906 October 跨站脚本漏洞 — october CWE-79 8.2 - 2026-04-14
CVE-2026-22692 October 安全漏洞 — october CWE-693 4.9 Medium 2026-04-14
CVE-2025-61674 October CMS 跨站脚本漏洞 — october CWE-79 6.1 Medium 2026-01-10
CVE-2025-61676 October CMS 跨站脚本漏洞 — october CWE-79 6.1 Medium 2026-01-10
CVE-2024-51991 October 代码问题漏洞 — october CWE-434 4.8AI Medium AI 2025-05-05
CVE-2024-25637 October 安全漏洞 — october CWE-79 3.1 Low 2024-06-26
CVE-2024-24764 October CMS 安全漏洞 — october CWE-601 3.5 Low 2024-06-26
CVE-2023-44381 October 代码注入漏洞 — october CWE-94 4.9 Medium 2023-12-01
CVE-2023-44382 October 代码注入漏洞 — october CWE-94 9.1 Critical 2023-12-01
CVE-2023-44383 October 跨站脚本漏洞 — october CWE-79 5.4 Medium 2023-11-29
CVE-2022-35944 October CMS 代码注入漏洞 — october CWE-94 6.2 Medium 2022-10-13
CVE-2022-24800 October CMS 竞争条件问题漏洞 — october CWE-362 8.1 High 2022-07-12
CVE-2022-23655 Octobercms 数据伪造问题漏洞 — october CWE-347 4.8 Medium 2022-02-23
CVE-2022-21705 Octobercms 安全漏洞 — october CWE-74 7.2 High 2022-02-23
CVE-2021-32649 October CMS 代码代码注入漏洞 — october CWE-74 8.8 High 2022-01-14
CVE-2021-32650 October CMS 代码注入漏洞 — october CWE-74 8.8 High 2022-01-14
CVE-2021-41126 October CMS 授权问题漏洞 — october CWE-287 7.2 High 2021-10-06
CVE-2021-29487 October CMS 安全漏洞 — october CWE-287 7.4 High 2021-08-26
CVE-2021-32648 Octobercms 安全漏洞 — october CWE-287 8.2 High 2021-08-26
CVE-2021-21264 October CMS 安全漏洞 — october CWE-862 5.2 Medium 2021-05-03
CVE-2021-21265 October CMS 安全漏洞 — october CWE-644 6.8 Medium 2021-03-10
CVE-2020-26231 October CMS 安全漏洞 — october CWE-862 5.2 Medium 2020-11-23
CVE-2020-15249 October CMS 跨站脚本漏洞 — october CWE-79 2.8 Low 2020-11-23

本页汇总了 octobercms 厂商截至目前公开的全部 39 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。