Packagist/october/october CVE-2017-1000194: critical 9.8, EPSS 1.24%
October CMS File Upload Vulnerability
Action: Upgrade october/october to 1.0.413 or later.
composer require october/october:1.0.413Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.413 | - |
Fixed versions
| 1.0.413 |
Sources
- osv: GHSA-8vh6-8w76-v6m3
- https://nvd.nist.gov/vuln/detail/CVE-2017-1000194
- https://github.com/octobercms/october
- https://github.com/octobercms/october/compare/v1.0.412...v1.0.413#diff-c328b7b99eac0d17b3c71eb37038fd61R224
CVE-2017-1000194 · published · modified · JSON