CVE-2020-5296 in OctoberCMSinformación

Resumen

por MITRE

In OctoberCMS (october/october composer package) versions from 1.0.319 and before 1.0.466, an attacker can exploit this vulnerability to delete arbitrary local files of an October CMS server. The vulnerability is only exploitable by an authenticated backend user with the `cms.manage_assets` permission. Issue has been patched in Build 466 (v1.0.466).

Be aware that VulDB is the high quality source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsable

GitHub, Inc.

Reservar

2020-01-02

Moderación

aceptado

Artículo

VDB-156084

CPE

listo

EPSS

0.01429

KEV

no

Actividades

muy bajo

Fuentes

MITREhttps://www.cve.org/CVERecord?id=CVE-2020-5296
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2020-5296
CVE Detailshttps://www.cvedetails.com/cve/CVE-2020-5296/

◂ AnteriorVisión De ConjuntoPróximo ▸

Want to know what is going to be exploited?

We predict KEV entries!