PT-2020-18385 · October · October Cms

Sivanesh Ashok + 1 · Published 2020-06-03 · Updated 2022-06-30 · CVE-2020-5296

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Medium

Base vector

AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions OctoberCMS versions 1.0.319 through 1.0.465

Description An attacker can exploit this issue to delete arbitrary local files of an October CMS server. The issue is only exploitable by an authenticated backend user with the cms.manage assets permission.

Recommendations For versions 1.0.319 through 1.0.465, update to Build 466 (v1.0.466) to resolve the issue. As a temporary workaround, consider applying the patch from https://github.com/octobercms/october/commit/2b8939cc8b5b6fe81e093fe2c9f883ada4e3c8cc to your installation manually if unable to upgrade to Build 466.

Exploit

Fix

Weakness Enumeration

CWE-73

CWE-610

Related Identifiers

CVE-2020-5296

GHSA-JV6V-FVVX-4932

Affected Products

October Cms

References · 9

• 🔥 http://packetstormsecurity.com/files/158730/October-CMS-Build-465-XSS-File-Read-File-Deletion-CSV-Injection.html · Exploit
• 🔥 http://seclists.org/fulldisclosure/2020/Aug/2 · Exploit
• https://github.com/octobercms/october/commit/2b8939cc8b5b6fe81e093fe2c9f883ada4e3c8cc · Patch
• https://github.com/octobercms/october/security/advisories/GHSA-jv6v-fvvx-4932 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2020-5296 · Security Note
• https://osv.dev/vulnerability/GHSA-jv6v-fvvx-4932 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-5296 · Vendor Advisory
• https://t.me/cvenotify/4176 · Telegram Post
• https://t.me/cvenotify/32418 · Telegram Post