PT-2020-18384 · October · October Cms

Sivanesh Ashok + 1 · Published 2020-06-03 · Updated 2022-06-30 · CVE-2020-5295

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Medium

Base vector

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions OctoberCMS versions 1.0.319 through 1.0.465

Description An attacker can exploit this issue to read local files of an October CMS server. The issue is only exploitable by an authenticated backend user with the cms.manage assets permission.

Recommendations For versions 1.0.319 through 1.0.465, update to Build 466 (v1.0.466) to resolve the issue. As a temporary workaround for versions that cannot be updated to Build 466, apply the patch from https://github.com/octobercms/october/commit/2b8939cc8b5b6fe81e093fe2c9f883ada4e3c8cc to your installation manually.

Exploit

Fix

Weakness Enumeration

CWE-829

CWE-98

Related Identifiers

CVE-2020-5295

GHSA-R23F-C2J5-RX2F

Affected Products

October Cms

References · 9

• 🔥 https://exploit-db.com/exploits/49045 · Exploit
• 🔥 http://packetstormsecurity.com/files/158730/October-CMS-Build-465-XSS-File-Read-File-Deletion-CSV-Injection.html · Exploit
• 🔥 http://seclists.org/fulldisclosure/2020/Aug/2 · Exploit
• https://github.com/octobercms/october/commit/2b8939cc8b5b6fe81e093fe2c9f883ada4e3c8cc · Patch
• https://github.com/octobercms/october/security/advisories/GHSA-r23f-c2j5-rx2f · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2020-5295 · Security Note
• https://osv.dev/vulnerability/CVE-2020-5295 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-r23f-c2j5-rx2f · Vendor Advisory
• https://t.me/cvenotify/4170 · Telegram Post