GitHub Advisoryadvisory · Packagist

GHSA-r23f-c2j5-rx2f Local File read vulnerability in OctoberCMS

MEDIUM Published 2020-06-03 Modified 2021-03-04 Official page ↗
Aliases
CVE-2020-5295
Ecosystem
Packagist
Packages
october/cms
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Weaknesses
CWE-829, CWE-98
Reviewed
2020-06-03

Affected packages

• Packagist october/cms: >= 1.0.319, < 1.0.466 → fixed in 1.0.466

Description

Impact An attacker can exploit this vulnerability to read local files of an October CMS server. The vulnerability is only exploitable by an authenticated backend user with the `cms.manage_assets` permission. Patches Issue has been patched in Build 466 (v1.0.466). Workarounds Apply https://github.com/octobercms/october/commit/2b8939cc8b5b6fe81e093fe2c9f883ada4e3c8cc to your installation manually if unable to upgrade to Build 466. References Reported by Sivanesh Ashok For more information If you have any questions or comments about this advisory: • Email us at [email protected] Threat assessment:

Related

Alias · CVE (1)

  • CVE-2020-5295 In OctoberCMS (october/october composer package) versions from 1.0.319 and before 1.0.466, an attacker can exploit this vulnerability to… vulnerability

Weakness · CWE (2)

  • CWE-829 Inclusion of Functionality from Untrusted Control Sphere weakness
  • CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program weakness

References