Vulnerabilities > CVE-2023-44381 - Unspecified vulnerability in Octobercms October

CVSS 4.9 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

HIGH

Confidentiality impact

NONE

Integrity impact

HIGH

Availability impact

NONE

network

low complexity

octobercms

NVD

Published: 2023-12-01

Updated: 2024-11-21

Summary

October is a Content Management System (CMS) and web platform to assist with development workflow. An authenticated backend user with the `editor.cms_pages`, `editor.cms_layouts`, or `editor.cms_partials` permissions who would normally not be permitted to provide PHP code to be executed by the CMS due to `cms.safe_mode` being enabled can craft a special request to include PHP code in the CMS template. This issue has been patched in version 3.4.15.

Vulnerable Configurations

Part	Description	Count
Application	Octobercms Octobercms October 3.0.0 Octobercms October 3.0.2 Octobercms October 3.0.6 Octobercms October 3.0.7 Octobercms October 3.0.9 Octobercms October 3.0.10 Octobercms October 3.0.17 Octobercms October 3.0.22 Octobercms October 3.0.40 Octobercms October 3.0.42 Octobercms October 3.0.45 Octobercms October 3.0.46 Octobercms October 3.0.56 Octobercms October 3.0.61 Octobercms October 3.0.62 Octobercms October 3.0.63 Octobercms October 3.0.64 Octobercms October 3.0.65 Octobercms October 3.0.66 Octobercms October 3.0.67 Octobercms October 3.0.69 Octobercms October 3.0.70 Octobercms October 3.0.71 Octobercms October 3.0.72 Octobercms October 3.0.73 Octobercms October 3.0.74 Octobercms October 3.0.75 Octobercms October 3.0.76 Octobercms October 3.1.0 Octobercms October 3.1.4 Octobercms October 3.1.8 Octobercms October 3.1.9 Octobercms October 3.1.11 Octobercms October 3.1.12 Octobercms October 3.1.16 Octobercms October 3.1.19 Octobercms October 3.1.21 Octobercms October 3.1.22 Octobercms October 3.1.24 Octobercms October 3.1.25 Octobercms October 3.1.26 Octobercms October 3.1.28 Octobercms October 3.1.29 Octobercms October 3.2.0 Octobercms October 3.2.7 Octobercms October 3.2.8 Octobercms October 3.2.10 Octobercms October 3.2.11 Octobercms October 3.2.12 Octobercms October 3.2.14 Octobercms October 3.2.16 Octobercms October 3.2.17 Octobercms October 3.2.21 Octobercms October 3.2.22 Octobercms October 3.2.23 Octobercms October 3.3.0 Octobercms October 3.3.3 Octobercms October 3.3.5 Octobercms October 3.3.7 Octobercms October 3.3.8 Octobercms October 3.3.9 Octobercms October 3.3.11 Octobercms October 3.3.12 Octobercms October 3.3.14 Octobercms October 3.3.17 Octobercms October 3.3.19 Octobercms October 3.3.20 Octobercms October 3.4.0 Octobercms October 3.4.4 Octobercms October 3.4.6 Octobercms October 3.4.8 Octobercms October 3.4.10 Octobercms October 3.4.11 Octobercms October 3.4.12 Octobercms October 3.4.14	75

Summary

Vulnerable Configurations

References