PT-2023-29216 · October · October

Whatev3N · Published 2023-11-29 · Updated 2023-12-06 · CVE-2023-44381

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions October versions prior to 3.4.15

Description The issue allows an authenticated backend user with the editor.cms pages, editor.cms layouts, or editor.cms partials permissions to craft a special request and include PHP code in the CMS template, despite cms.safe mode being enabled. This poses a problem for those relying on cms.safe mode to restrict users from writing and executing arbitrary PHP.

Recommendations For versions prior to 3.4.15, update to version 3.4.15 to resolve the issue. As a temporary workaround, consider removing the editor.cms pages, editor.cms layouts, or editor.cms partials permissions from untrusted users to minimize the risk of exploitation.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2023-44381

GHSA-Q22J-5R3G-9HMH

Affected Products

October

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/44xxx/CVE-2023-44381.json · Exploit
• https://github.com/octobercms/october/security/advisories/GHSA-q22j-5r3g-9hmh · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-44381 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-q22j-5r3g-9hmh · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-44381 · Security Note
• https://github.com/octobercms/october · Note
• https://t.me/cvenotify/62609 · Telegram Post
• https://t.me/cvenotify/62023 · Telegram Post
• https://t.me/cvenotify/61963 · Telegram Post