{"action":"Upgrade october/cms to 1.0.469 or later.","affected":[{"fixed":"1.0.469","introduced":"1.0.421"}],"component":"october/cms","cve_ids":["CVE-2020-15246"],"ecosystem":"Packagist","epss":0.01699,"exploited":false,"fixed_versions":["1.0.469"],"ghsa_id":"GHSA-xwjr-6fj7-fc6h","id":"tcs_01M5KFBDXRGNQXKQB83F68WX1B","modified_at":"2026-07-08T06:28:21.123703665Z","published_at":"2020-11-23T19:48:12Z","references":["https://osv.dev/vulnerability/GHSA-xwjr-6fj7-fc6h","https://github.com/octobercms/october/security/advisories/GHSA-xwjr-6fj7-fc6h","https://nvd.nist.gov/vuln/detail/CVE-2020-15246","https://github.com/octobercms/library/commit/80aab47f044a2660aa352450f55137598f362aa4","https://github.com/octobercms/october"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-xwjr-6fj7-fc6h","url":"https://osv.dev/vulnerability/GHSA-xwjr-6fj7-fc6h"}],"summary":"Local File Inclusion by unauthenticated users"}