Support Us — Your donation helps us keep running

Goal: 1000 CNY，Raised: 1000 CNY

100.0%
Donate Now

octobercms — Vulnerabilities & Security Advisories 39

Browse all 39 CVE security advisories affecting octobercms. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Top 10 Products octobercms:october
CVE IDTitleCVSSSeverityPaused
CVE-2020-15248 Privilege escalation by backend users assigned to the default "Publisher" system role — octoberCWE-863 4.0 Medium2020-11-23
CVE-2020-15247 Twig Sandbox Escape by authenticated users with access to editing CMS templates when safemode is enabled. — octoberCWE-862 5.2 Medium2020-11-23
CVE-2020-15246 Local File Inclusion by unauthenticated users — octoberCWE-863 7.5 High2020-11-23
CVE-2020-15128 Reliance on Cookies without validation in OctoberCMS — octoberCWE-565 6.1 Medium2020-07-31
CVE-2020-5299 Potential CSV Injection vector in OctoberCMS — octoberCWE-77 4.0 Medium2020-06-03
CVE-2020-5296 Arbitrary File Deletion vulnerability in OctoberCMS — octoberCWE-73 6.2 Medium2020-06-03
CVE-2020-5297 Upload whitelisted files to any directory in OctoberCMS — octoberCWE-73 3.4 Low2020-06-03
CVE-2020-5298 Reflected XSS when importing CSV in OctoberCMS — octoberCWE-87 4.0 Medium2020-06-03
CVE-2020-5295 Local File read vulnerability in OctoberCMS — octoberCWE-98 4.8 Medium2020-06-03

This page lists every published CVE security advisory associated with octobercms. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.