cve.bz

CVE-2017-1000197

9.8 criticalEPSS 1.2%

Critical (9.8) in octobercms october. EPSS 1.2% chance of exploitation in the next 30 days.

October CMS build 412 is vulnerable to file path modification in asset move functionality resulting in creating creating malicious files on the server.

Severity

CVSS 3.0

9.8 critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
1.2% chance of exploitation in the next 30 days; higher than 68% of CVEs (scores of 2026-10-31)
CWE
CWE-417
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON