CVE-2020-5296 in OctoberCMS情報

要約

〜によって MITRE

In OctoberCMS (october/october composer package) versions from 1.0.319 and before 1.0.466, an attacker can exploit this vulnerability to delete arbitrary local files of an October CMS server. The vulnerability is only exploitable by an authenticated backend user with the `cms.manage_assets` permission. Issue has been patched in Build 466 (v1.0.466).

Be aware that VulDB is the high quality source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

責任者

GitHub, Inc.

予約する

2020年01月02日

モデレーション

承諾済み

エントリ

VDB-156084

CPE

準備完了

CWE

CWE-73 (確認済み)

CVSS

6.2 (NVD)

EPSS

0.01429

KEV

いいえ

アクティビティ

非常低い

ソース

MITRE	https://www.cve.org/CVERecord?id=CVE-2020-5296
NVD	https://nvd.nist.gov/vuln/detail/CVE-2020-5296
CVE Details	https://www.cvedetails.com/cve/CVE-2020-5296/

◂ 前概要次 ▸

Interested in the pricing of exploits?

See the underground prices here!