GitHub Advisoryadvisory · Packagist

GHSA-jv6v-fvvx-4932 Arbitrary File Deletion vulnerability in OctoberCMS

MEDIUM Published 2020-06-03 Modified 2021-03-04 Official page ↗
Aliases
CVE-2020-5296
Ecosystem
Packagist
Packages
october/cms
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:H/A:N
Weaknesses
CWE-610, CWE-73
Reviewed
2020-06-03

Affected packages

• Packagist october/cms: >= 1.0.319, < 1.0.466 → fixed in 1.0.466

Description

Impact An attacker can exploit this vulnerability to delete arbitrary local files of an October CMS server. The vulnerability is only exploitable by an authenticated backend user with the `cms.manage_assets` permission. Patches Issue has been patched in Build 466 (v1.0.466). Workarounds Apply https://github.com/octobercms/october/commit/2b8939cc8b5b6fe81e093fe2c9f883ada4e3c8cc to your installation manually if unable to upgrade to Build 466. References Reported by Sivanesh Ashok For more information If you have any questions or comments about this advisory: • Email us at [email protected] Threat assessment:

Related

Alias · CVE (1)

  • CVE-2020-5296 In OctoberCMS (october/october composer package) versions from 1.0.319 and before 1.0.466, an attacker can exploit this vulnerability to… vulnerability

Weakness · CWE (2)

  • CWE-610 Externally Controlled Reference to a Resource in Another Sphere weakness
  • CWE-73 External Control of File Name or Path weakness

References