{"action":"Upgrade october/backend to 1.0.470 or later.","affected":[{"fixed":"1.0.470","introduced":"1.0.319"}],"component":"october/backend","cve_ids":["CVE-2020-15248"],"ecosystem":"Packagist","epss":0.00313,"exploited":false,"fixed_versions":["1.0.470"],"ghsa_id":"GHSA-rfjc-xrmf-5vvw","id":"tcs_01M5KF870PBQ5YHXNW2PK2YYW0","modified_at":"2026-07-08T06:27:54.513290340Z","published_at":"2020-11-23T19:47:27Z","references":["https://osv.dev/vulnerability/GHSA-rfjc-xrmf-5vvw","https://github.com/octobercms/october/security/advisories/GHSA-rfjc-xrmf-5vvw","https://nvd.nist.gov/vuln/detail/CVE-2020-15248","https://github.com/octobercms/october/commit/4c650bb775ab849e48202a4923bac93bd74f9982","https://github.com/octobercms/october/commit/78a37298a4ed4602b383522344a31e311402d829","https://github.com/octobercms/october"],"severity":{"label":"medium","score":4},"sources":[{"source":"osv","source_id":"GHSA-rfjc-xrmf-5vvw","url":"https://osv.dev/vulnerability/GHSA-rfjc-xrmf-5vvw"}],"summary":"Privilege escalation by backend users assigned to the default \"Publisher\" system role"}